Behavioral task
behavioral1
Sample
c21b228e1bbf159350dbfea9ada7c22a.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c21b228e1bbf159350dbfea9ada7c22a.exe
Resource
win10v2004-20240226-en
General
-
Target
c21b228e1bbf159350dbfea9ada7c22a
-
Size
552KB
-
MD5
c21b228e1bbf159350dbfea9ada7c22a
-
SHA1
5db75c7f1ddb15609a43db6d812b3d9677f874ac
-
SHA256
e4faa15e03d7d1b8a11d8f80115d1819fdcbed81e18c614fa16ee7ae8803e31a
-
SHA512
c4828125aa49e40de471bbbf62c816408c86feb5166d0ee98ce9b54fcded2a6560233af9e7a0decd414928da61be86c036fae5753258526ccb4e2c57e0c5e290
-
SSDEEP
12288:MN3QoZ735z2Zs6diGs0DE1UMj28iRfsHmKYHxPdKrGFnahXmSX65/G0vX2:o3hr5z26+Tsr5iRkHmDHxoa9qXmSq5/g
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c21b228e1bbf159350dbfea9ada7c22a
Files
-
c21b228e1bbf159350dbfea9ada7c22a.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 963KB - Virtual size: 964KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 86KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE