Static task
static1
Behavioral task
behavioral1
Sample
21ed6915ba59320de557573450d5d9f0.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
21ed6915ba59320de557573450d5d9f0.exe
Resource
win10v2004-20231215-en
General
-
Target
21ed6915ba59320de557573450d5d9f0
-
Size
359KB
-
MD5
21ed6915ba59320de557573450d5d9f0
-
SHA1
247fb643ce5b38ac94fc3f3581d0c76bf73447de
-
SHA256
71eebbf8f66b6630797267472b0ea25bedd0ab22956a825a6e6ce692f8a711c7
-
SHA512
26d518878b9811e566d9caad1fd1b5126a4642b6b64c639ab1bd0ed31f493567c394d00844b567076f12c6f48d64d490d7ca8c31d6a7e16781684807751865cf
-
SSDEEP
1536:pABTCWyxa5oEUtU6a2+q9k9IVkmf7G4Nd6tLWcQh:ChqaiEU/arqMcPfVNd612h
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 21ed6915ba59320de557573450d5d9f0
Files
-
21ed6915ba59320de557573450d5d9f0.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
fh Size: 308KB - Virtual size: 308KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
b)�#6� Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE