Static task
static1
Behavioral task
behavioral1
Sample
221d6473e79f2d6248d3167229f4f32d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
221d6473e79f2d6248d3167229f4f32d.exe
Resource
win10v2004-20231215-en
General
-
Target
221d6473e79f2d6248d3167229f4f32d
-
Size
441KB
-
MD5
221d6473e79f2d6248d3167229f4f32d
-
SHA1
61f14f4341afbbda249c3dd54028c1427d2f0b6e
-
SHA256
158b23bfb2dd36d19231e80a844200588cca9c6c2cdf340d5205ee5ac48c918f
-
SHA512
d3837a1f87b02a312ac31e4e83ebd23b2449e95959e1005b7f99ec6aef6efb3999cc824178c32ba03e28cf6b13277cc62ef582ca2c9a2e35a196de3fc1768e5f
-
SSDEEP
6144:pIhsfbUfdM1Op/8O1+56qCMpEhbi/OJrpAket3n2vlpHRcdhPBr:2qQfKQ3o56qCuwbgOvet32i
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 221d6473e79f2d6248d3167229f4f32d
Files
-
221d6473e79f2d6248d3167229f4f32d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 116KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rol Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE