Static task
static1
Behavioral task
behavioral1
Sample
21e70ead6a151c167f5c50f6add42ed5.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
21e70ead6a151c167f5c50f6add42ed5.exe
Resource
win10v2004-20231215-en
General
-
Target
21e70ead6a151c167f5c50f6add42ed5
-
Size
50KB
-
MD5
21e70ead6a151c167f5c50f6add42ed5
-
SHA1
3f61c9b6accc296d2ad1ea8e90dc3d30841df7e4
-
SHA256
159877dc5a15d3cb73fe636b062a4103a306cb1037a24451fc85b3728979ab0a
-
SHA512
55fd002f5450addcf4bcde9d3c20492ae26648fc3f72b2487e161652e0f3b283c7d2411fd5ff43d300841e292f2ead46aabf33f07d9ebb3ffb67a0256ca6c399
-
SSDEEP
768:LQqkJ5LEXLe3qKUaL6mTp/NKkgRv+AGk9GDRMXSQ0gEuQf18p3QFOtZXTv7/lIX0:L9k7Eq3B7+UShNjXSQsukGp3ZZD7i6i0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 21e70ead6a151c167f5c50f6add42ed5
Files
-
21e70ead6a151c167f5c50f6add42ed5.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
DINGBOY Size: 512B - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DINGBOY Size: 49KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE