Behavioral task
behavioral1
Sample
21928dfd0b465ac54686e27cf69121d0N.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
21928dfd0b465ac54686e27cf69121d0N.exe
Resource
win10v2004-20240709-en
General
-
Target
21928dfd0b465ac54686e27cf69121d0N.exe
-
Size
1.9MB
-
MD5
21928dfd0b465ac54686e27cf69121d0
-
SHA1
28e62b1b1d2e0acca2375e306b5e8a39be40e68f
-
SHA256
4729243e0d76d15b793a99c15a744271ec77994d92e75a2919205722aab87deb
-
SHA512
44ff9652aeef36a5f4375613d36a36f5061823a97fd3e6f68b27cce8a7db376ebc6b554133c387cbbb30afefe305cbc773df7a3d261c13f4e59d6040f923c1a4
-
SSDEEP
24576:bSLFVFdzYqHFU3CC6RW4zgLOzDsApQFiFwELjjMCq6slhrrzBP6Un8KT9cvoUFbS:btuFh/8IsYHOEiPhXzImckbhr6HW1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 21928dfd0b465ac54686e27cf69121d0N.exe
Files
-
21928dfd0b465ac54686e27cf69121d0N.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bvxzt Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yno Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vzkj Size: 512B - Virtual size: 4KB
.kemyz Size: 512B - Virtual size: 4KB