Static task
static1
Behavioral task
behavioral1
Sample
00d21753ea9af3bb4bc70efdcbe28edeb278eaacbf896a3e906535a06d7052b2.exe
Resource
win7-20230831-en
General
-
Target
00d21753ea9af3bb4bc70efdcbe28edeb278eaacbf896a3e906535a06d7052b2
-
Size
15.6MB
-
MD5
186d02d04fac578d96f673eb103f857b
-
SHA1
e3618388cc773e4bf0336fe58b41d81b0bf2b192
-
SHA256
00d21753ea9af3bb4bc70efdcbe28edeb278eaacbf896a3e906535a06d7052b2
-
SHA512
297864ce515d55f52588e4f43a0faaefe5e0e78ebdfad5ef9a15e636605739b1df66b7d3dd6bd45adcfaa57d8a27b9b048b37ce6f136596876aa2db249a7d9ce
-
SSDEEP
393216:t0hHeGYldR/g3Ucmfo+jYCIw4yVcNWFS2/Vdv9WKNAYKMI3xA4gSQA:t0h7+jkyOgz/JWKOYKMI2f8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00d21753ea9af3bb4bc70efdcbe28edeb278eaacbf896a3e906535a06d7052b2
Files
-
00d21753ea9af3bb4bc70efdcbe28edeb278eaacbf896a3e906535a06d7052b2.exe windows:5 windows x86
88381b84da56810b869e897e6d45bd58
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
user32
EnumChildWindows
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vm0 Size: 3.9MB - Virtual size: 3.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vm1 Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vm2 Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bxpck Size: 3.9MB - Virtual size: 3.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.main Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3.2MB - Virtual size: 3.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE