Behavioral task
behavioral1
Sample
21bbf4cf7e52a2852cb722de8a7e2cb32ec83f5ad4e9c1adc47a313aea842537.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
21bbf4cf7e52a2852cb722de8a7e2cb32ec83f5ad4e9c1adc47a313aea842537.exe
Resource
win10v2004-20240802-en
General
-
Target
21bbf4cf7e52a2852cb722de8a7e2cb32ec83f5ad4e9c1adc47a313aea842537
-
Size
98KB
-
MD5
40d519590cfcc608e31a20fa26780ab7
-
SHA1
e6f17ab307a17e81a1489f0dfec15cd8664a67df
-
SHA256
21bbf4cf7e52a2852cb722de8a7e2cb32ec83f5ad4e9c1adc47a313aea842537
-
SHA512
e6cf87c577853f591d886b6cf036e30682989ddbc0d731a5159d12672bb4e548b83f2dda21a17756a559982b2e32225f61df1a0ab885e3c2ad18455f75a72b08
-
SSDEEP
1536:V7Zf/FAxTWoJJ7TTQoQeTW7JJ7TTQoQymc:fny1oRdoRymc
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 21bbf4cf7e52a2852cb722de8a7e2cb32ec83f5ad4e9c1adc47a313aea842537
Files
-
21bbf4cf7e52a2852cb722de8a7e2cb32ec83f5ad4e9c1adc47a313aea842537.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE