Behavioral task
behavioral1
Sample
c21200dae42d9bc5e4dc9430cbbe665a.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
c21200dae42d9bc5e4dc9430cbbe665a.exe
Resource
win10v2004-20240226-en
General
-
Target
c21200dae42d9bc5e4dc9430cbbe665a
-
Size
130KB
-
MD5
c21200dae42d9bc5e4dc9430cbbe665a
-
SHA1
7c4898ce1e1d11b01e980acf2d83d896745445ad
-
SHA256
5fc842bc60865a4a05bc6eaa7ce08213c162530a3dec6eae3f23500a3d846b5b
-
SHA512
e17492e76b11bc9c8843be983132c5e386a2c7bbd90aeab48ca3b412f7fa97c35c5fb0ef479148013374e3ff4d4c9b35af69669b8ab85cff966d61b4e796bcf4
-
SSDEEP
3072:sr3KcWmjRrzSOAnAorbZJFS2iuA3KOhNBhX010e5/i:/dhrbZ3SW4XyBli
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c21200dae42d9bc5e4dc9430cbbe665a
Files
-
c21200dae42d9bc5e4dc9430cbbe665a.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE