Static task
static1
Behavioral task
behavioral1
Sample
21ab215d667d8ef1256a8dddb8620f0f.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
21ab215d667d8ef1256a8dddb8620f0f.exe
Resource
win10v2004-20231222-en
General
-
Target
21ab215d667d8ef1256a8dddb8620f0f
-
Size
59KB
-
MD5
21ab215d667d8ef1256a8dddb8620f0f
-
SHA1
1d227a09c10927fb3fe28764e46f46eba85c9bf1
-
SHA256
0541898cf5e279c19e0054835540b931450df4ae97864a2d9417fa04ad2df7d2
-
SHA512
a76fee8dddd4a8fc35056b3caec17e6011d5c42262314a010721ce8a1a01152b3d7740af8ff319d100d164610014787eb02d7ae68e7099cdd062bfa7bd9dad27
-
SSDEEP
768:mHpgOnh42tSAcytbyG5PW/uMGwQSMMUjQkJvv1xjpLaUvxJdMbyDMiC7FGd5Fy65:4GOJEk+G6QSMMU0kJv9llaywbyDRpGMz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 21ab215d667d8ef1256a8dddb8620f0f
Files
-
21ab215d667d8ef1256a8dddb8620f0f.exe windows:4 windows x86 arch:x86
bf61fd0c4995f52e6502284e50c39e02
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
VirtualAlloc
VirtualProtect
VirtualFree
Sections
.aspack Size: - Virtual size: 376KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 59KB - Virtual size: 60KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE