Behavioral task
behavioral1
Sample
21668bf2fc4f2f1d28c3db39aa7aad79ac9cad506eaa344a49fc27f4e5b7807f.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
21668bf2fc4f2f1d28c3db39aa7aad79ac9cad506eaa344a49fc27f4e5b7807f.exe
Resource
win10v2004-20240730-en
General
-
Target
21668bf2fc4f2f1d28c3db39aa7aad79ac9cad506eaa344a49fc27f4e5b7807f
-
Size
6.4MB
-
MD5
2f29e262655434c4d9d5d5dbba6adb43
-
SHA1
7d29ab802f8e7a5ce6d90f3411e713cd0fe45e2d
-
SHA256
21668bf2fc4f2f1d28c3db39aa7aad79ac9cad506eaa344a49fc27f4e5b7807f
-
SHA512
88e4a63e4c6ee3cdf3158197024b033d66c24af642ff95010d563bf2c10bda1c6e49c0c8db9c54b86adc292b5b6502c214a86b4702a04e392ebbbd98c6ff15b6
-
SSDEEP
98304:rL+fN6/00nL84E8n+HPCpl43H3H7WgZ1L3aehs3d/qMw/7IOlPaTAuG17T:Hy4/Xng4E8+vCSau4ehI/ql0bTAuG17T
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 21668bf2fc4f2f1d28c3db39aa7aad79ac9cad506eaa344a49fc27f4e5b7807f
Files
-
21668bf2fc4f2f1d28c3db39aa7aad79ac9cad506eaa344a49fc27f4e5b7807f.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 9.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 6.3MB - Virtual size: 6.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE