Static task
static1
Behavioral task
behavioral1
Sample
a21894eebe503ef5556993d5a0bd7518.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
a21894eebe503ef5556993d5a0bd7518.exe
Resource
win10v2004-20230703-en
General
-
Target
a21894eebe503ef5556993d5a0bd7518.exe
-
Size
604KB
-
MD5
a21894eebe503ef5556993d5a0bd7518
-
SHA1
71ed2b3656bacf9ce92746c2d3bf5ec0f2562b7f
-
SHA256
73f265394c186f866d3eb1d41bf0f2a87e3462fa359746351b5030152271c152
-
SHA512
227ca4d5d39a709a1c65697417b146bf41485c3643b9b338c2d528f4010b13b9eb028f50303f8e8ea27753d073c5b8c7c9831c44433eb6e0319f0217de134ab7
-
SSDEEP
12288:9HerdcsnB8BoRC5PKaphHNQ3HEXHKzcAXx6a9aC:d+dPBRR4hpZK3CAXx6a9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a21894eebe503ef5556993d5a0bd7518.exe
Files
-
a21894eebe503ef5556993d5a0bd7518.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 578KB - Virtual size: 577KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ