Static task
static1
Behavioral task
behavioral1
Sample
21a50e8ab1954121096c824b615caf25fafe21581e9d9c02cd52235e570b56e7.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
21a50e8ab1954121096c824b615caf25fafe21581e9d9c02cd52235e570b56e7.exe
Resource
win10v2004-20230915-en
General
-
Target
21a50e8ab1954121096c824b615caf25fafe21581e9d9c02cd52235e570b56e7
-
Size
15.9MB
-
MD5
4579adbccc850a50c98356cdfc1b7f24
-
SHA1
1d7d2c5d65c41f633d2a345fe0ebce26e0893f1b
-
SHA256
21a50e8ab1954121096c824b615caf25fafe21581e9d9c02cd52235e570b56e7
-
SHA512
bcb7a39585ff318bc59f9e848159781fda31741f964818ef925e9bf646d716c9b4ae5c924696d0e2da9a204a9bce98fff5935fad42ba41029adf8d385a6321b1
-
SSDEEP
196608:USsbggBnSZmY3kRKpdqC7MRPOZuwTSIMYAnW4pKoyc4hHK/qOrQgudi6zjW5i1cn:USsFQ7Ukn57M9kz5DVVYy650cQdGiP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 21a50e8ab1954121096c824b615caf25fafe21581e9d9c02cd52235e570b56e7
Files
-
21a50e8ab1954121096c824b615caf25fafe21581e9d9c02cd52235e570b56e7.exe windows:4 windows x86
44104768ca3e80b48a9fef8af11bc9c2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
PeekNamedPipe
user32
MessageBoxA
shell32
SHGetSpecialFolderPathA
wininet
InternetOpenA
shlwapi
PathFileExistsA
ws2_32
inet_addr
Sections
.text Size: - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 698KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 664B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.svmp1 Size: - Virtual size: 3.1MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp2 Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp3 Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp4 Size: 10.2MB - Virtual size: 10.2MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp5 Size: 12KB - Virtual size: 11KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp6 Size: 404KB - Virtual size: 400KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE