Static task
static1
Behavioral task
behavioral1
Sample
21c1f04518e00c6ede53fef81c8d6c40.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
21c1f04518e00c6ede53fef81c8d6c40.exe
Resource
win10v2004-20231222-en
General
-
Target
21c1f04518e00c6ede53fef81c8d6c40
-
Size
187KB
-
MD5
21c1f04518e00c6ede53fef81c8d6c40
-
SHA1
45c677612a2dc9590f2a71ce8e2e07e433e5cbd6
-
SHA256
50988880a58a563a73069670cfc0ebdf8a60214541aa6d548f148feb5871cac0
-
SHA512
1b629fd88a930a3efe0b3b66d39c5f86853b9dba4684aaef8dd45b8fe709511665d4ae709e4da0f92f61116370ec8661b9fdbe48c3353f864a4446fa1199f259
-
SSDEEP
3072:X9xYxTB4M6bLnyZjnMQW5QYNhKXue1exeeza4ESDTfGBleRsjwTpdU8erKA:Q6bj8bUQKhKoxeem4PDTwe/pXAKA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 21c1f04518e00c6ede53fef81c8d6c40
Files
-
21c1f04518e00c6ede53fef81c8d6c40.exe windows:4 windows x86 arch:x86
87bed5a7cba00c7e1f4015f1bdae2183
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rawdat Size: 172KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE