Static task
static1
Behavioral task
behavioral1
Sample
21e790da179803454eeb56196004b1ab.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
21e790da179803454eeb56196004b1ab.exe
Resource
win10v2004-20231222-en
General
-
Target
21e790da179803454eeb56196004b1ab
-
Size
91KB
-
MD5
21e790da179803454eeb56196004b1ab
-
SHA1
3712a9de1deda5fcdb8e0ee51c92ca48ded55ac3
-
SHA256
aca50efeb84cd8819d89785894cec5a811adcb44a82957df0ac0bb933bd79d4f
-
SHA512
60243ca0f48691afe3245ed4664abdf454d39a9e685b5d1cdf6108efbf8f4379a840f914c202d8f010cbd8e721508b8e624fed11fed7d9534650a0def31cd0f9
-
SSDEEP
1536:WJ/WXkpE9krYc/1ZHBeGez1n+QYH44Dn5MH:EE9oYc/nHBeG4pYjL5MH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 21e790da179803454eeb56196004b1ab
Files
-
21e790da179803454eeb56196004b1ab.exe windows:5 windows x86 arch:x86
e6e7a85a99ddfdd2f7fd419dc7f52b94
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
MapViewOfFile
CloseHandle
WaitForSingleObject
ExitThread
OpenProcess
SetThreadPriority
GetCurrentThread
ResetEvent
SetEvent
CreateThread
GetPriorityClass
UnmapViewOfFile
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
CreateMutexA
CreateFileMappingA
CreateEventA
SetPriorityClass
SetCurrentDirectoryA
GetSystemDirectoryA
HeapAlloc
HeapFree
HeapCreate
GetCurrentProcessId
FreeLibrary
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
RtlUnwind
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
GetCPInfo
lstrcpyA
GetOEMCP
SetHandleCount
GetStdHandle
GetFileType
VirtualFree
WriteFile
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
VirtualAlloc
GetCurrentProcess
TerminateProcess
GetProcAddress
CreateFileA
LoadLibraryA
lstrlenA
lstrcmpiA
SetErrorMode
HeapDestroy
GetModuleHandleA
GetACP
RegisterServiceProcess
gdi32
CreateFontA
DeleteObject
SetBkColor
ExtTextOutA
SetTextColor
GetTextExtentPoint32A
GetStockObject
SelectObject
CreateDCA
DeleteDC
user32
TranslateMessage
GetMessageA
CreateWindowExA
DispatchMessageA
RegisterClassA
RegisterWindowMessageA
wsprintfA
SetTimer
PostQuitMessage
KillTimer
FillRect
EndPaint
BeginPaint
ReleaseDC
DefWindowProcA
GetClientRect
GetDC
UpdateWindow
ShowWindow
GetSystemMetrics
ScrollWindowEx
winmm
waveOutClose
waveOutSetVolume
waveOutGetVolume
waveOutOpen
timeKillEvent
timeSetEvent
Sections
.text Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 9KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 55KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE