Static task
static1
Behavioral task
behavioral1
Sample
Device/HarddiskVolume4/Windows/System32/Service_21.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Device/HarddiskVolume4/Windows/System32/Service_21.exe
Resource
win10v2004-20230220-en
General
-
Target
Service_21.exe
-
Size
2.8MB
-
MD5
08a9a1b6214ed2528a8dad7ddf11da09
-
SHA1
7e8fc97e73105f0eac032f3aa6000bd338003998
-
SHA256
a4abe185dd026a5677cf70dc08d679279fa364425d6cb8b52e1debfa07dc5eac
-
SHA512
0a5b0b75b9f9564c3482af1af01e1d8c502c734011d54c33db14d53023ff46e317300f4b351a8d8ae00f99937146aa45a07e823c15460706b978eca0f9fdc664
-
SSDEEP
49152:z311KFHOYQlugcmcuwG8wUuUszBMUsMampf6K8QZc+GcE5buI6mGrYvO5hXWvo:j2u1Pw/3CdDsMFpf6K8GcfnqI6jMvxvo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Device/HarddiskVolume4/Windows/System32/Service_21.exe
Files
-
Service_21.exe.zip
Password: ow&b!54X6x_#4gT@9BT4
-
Device/HarddiskVolume4/Windows/System32/Service_21.exe.exe windows x86
Password: ow&b!54X6x_#4gT@9BT4
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 2.9MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
manifest.json