Static task
static1
Behavioral task
behavioral1
Sample
21ce7b3dd9bdb3e730f91d48ceccfd5e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
21ce7b3dd9bdb3e730f91d48ceccfd5e.exe
Resource
win10v2004-20231215-en
General
-
Target
21ce7b3dd9bdb3e730f91d48ceccfd5e
-
Size
840KB
-
MD5
21ce7b3dd9bdb3e730f91d48ceccfd5e
-
SHA1
4d20828537e3334134105a5e58fa1ecbd66c0bdb
-
SHA256
e4bbc8f62804fc5678ee6b97701349bd52abc791992344e5272f19e8b0234918
-
SHA512
320fb494dc28bac12b131453c8d374fac9cde336b56f8d4415884d7cfd7a4f58b89fd3cab1a0df465cf424d91dcb7c8917b71158b0f9320422f74e9cbe6aec94
-
SSDEEP
24576:QBocw7zMHHN+FgBYJQfh4DKd78GpBWTf8v2:hH34NcyMQ54gBpETf8v2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 21ce7b3dd9bdb3e730f91d48ceccfd5e
Files
-
21ce7b3dd9bdb3e730f91d48ceccfd5e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.bss Size: - Virtual size: 1.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.packed Size: 801KB - Virtual size: 804KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.loader Size: 15KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE