Static task
static1
Behavioral task
behavioral1
Sample
21c785aadf7121ee9c627987cf67eda6.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
21c785aadf7121ee9c627987cf67eda6.exe
Resource
win10v2004-20231222-en
General
-
Target
21c785aadf7121ee9c627987cf67eda6
-
Size
506KB
-
MD5
21c785aadf7121ee9c627987cf67eda6
-
SHA1
aa1b7407709d9aa93b1d23c9c0ee7f7104665642
-
SHA256
10443a50c8a940177bd3d7df9e24a373900151647a44d43b22f126043e82aedb
-
SHA512
60451109b2b4f7bdc55085496a54dda0f675ab8b475b34f8211afd74559a39aaafeaab7caa39c5337b1dd159ca1dbb9b703c0b2c5ab693292c708e558df640a3
-
SSDEEP
6144:TtUdsvm5aHWT9DQKZ6gzwT8U8jYm2p00YcP9NrDuyhYu6q2a9G+G1AXOei3Lsr:pPuwHA1BZ6swTSL0d9pDuyhcq2gXOLbc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 21c785aadf7121ee9c627987cf67eda6
Files
-
21c785aadf7121ee9c627987cf67eda6.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 475KB - Virtual size: 474KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ