Behavioral task
behavioral1
Sample
821c389dd646451572cfe064fa222d70N.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
821c389dd646451572cfe064fa222d70N.exe
Resource
win10v2004-20240802-en
General
-
Target
821c389dd646451572cfe064fa222d70N.exe
-
Size
20KB
-
MD5
821c389dd646451572cfe064fa222d70
-
SHA1
06ea7a825d223c41866744c9f4d8316099b0c4f2
-
SHA256
69286b67455eec95fb5ad3ba374581d53a8fe0678afa0a5b70f3075a60479ae2
-
SHA512
138625cab313a4eb9e067666e850a75887a1f68c67d72d91a403973f0095c9e21ca4d4ee9432fb06e3e3043638f506c07c0d509aa8c785eeed5201d6ed332f41
-
SSDEEP
192:VjUWFh4fvYGIQnsA6psQXFaNJhLkwcud2DH9VwGfct1hM5EKU:9KE7pXaNJawcudoD7U7S5Ev
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 821c389dd646451572cfe064fa222d70N.exe
Files
-
821c389dd646451572cfe064fa222d70N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE