Static task
static1
Behavioral task
behavioral1
Sample
21ccc37b20a2e28686743fc792d06bbf.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
21ccc37b20a2e28686743fc792d06bbf.exe
Resource
win10v2004-20231222-en
General
-
Target
21ccc37b20a2e28686743fc792d06bbf
-
Size
254KB
-
MD5
21ccc37b20a2e28686743fc792d06bbf
-
SHA1
61a76e34b5032f55ed9bcd1a2423a21b3fc1e1e0
-
SHA256
32c02bb3647f01760e60a7d6a88933118c44b6fb9fd68dd4bc1e41bd238771f3
-
SHA512
7a497eebf72114aee0c6370bcfb8668bbb052b15e300a449795b6807d0c705eb097e8795b9c9c4aaa0551e16b4ef82aa18026b0597804739629f995977e14dc2
-
SSDEEP
6144:vd6ZXxbk855Kxv6Zb+60lgkbIiWDGcsACDd:vOxbk8T+NlPIivQq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 21ccc37b20a2e28686743fc792d06bbf
Files
-
21ccc37b20a2e28686743fc792d06bbf.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 205KB - Virtual size: 204KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ