Behavioral task
behavioral1
Sample
21b38ff2a56ef385fe0d34645594bca0N.exe
Resource
win7-20240708-en
General
-
Target
21b38ff2a56ef385fe0d34645594bca0N.exe
-
Size
142KB
-
MD5
21b38ff2a56ef385fe0d34645594bca0
-
SHA1
ea16ccc4f5a6e99a81f71f71f4f9d02c0bcd71ae
-
SHA256
0bc144e6c63e7ee69cbcaa2900b23731e4b2a84f38de581ecf7ed95d27a92199
-
SHA512
cdc427903297a3400b7d79e1ceb8429cb12827e44a12e7ef9b00a247e8699a1b610243522f836bd07542473bd2830d93f2e2b1bc4720a8ba1cc0831d36bb5b13
-
SSDEEP
1536:CTW7JJZENTBWv364p9+hLQHu92usZV7YMMiRx89qMcDCmw022geswXtLa:htEevvpspQHNusZdf89bcDCKjg2s
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 21b38ff2a56ef385fe0d34645594bca0N.exe unpack001/out.upx
Files
-
21b38ff2a56ef385fe0d34645594bca0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ