Static task
static1
Behavioral task
behavioral1
Sample
21f9e5e26b9798ccd8e48ce3fcc83307.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
21f9e5e26b9798ccd8e48ce3fcc83307.exe
Resource
win10v2004-20231215-en
General
-
Target
21f9e5e26b9798ccd8e48ce3fcc83307
-
Size
2.2MB
-
MD5
21f9e5e26b9798ccd8e48ce3fcc83307
-
SHA1
b0e9ab8673deea2c00d8ae63f462a5d832a35b7e
-
SHA256
654e2d8b6e6c493694bcc8eb7e0d291fc9414dddc546ef6fd23620fc6d6df608
-
SHA512
20dd7e02df56b7c02aa938b55cfaf9fb8bf6b829addb391573e1564e246c5f6af7345b68e5cf2b7ef898c3a65cb775fff63584bcf68060d42dd136bf2d7fdf01
-
SSDEEP
24576:FqnK3hW+pM0awdQ9egBrDyGqr/wEeLgCjtayrfoI6Xn/957D9obwUSNZHPt7YICI:F5Wn9n9RWqHw11FDabwxNZvuPI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 21f9e5e26b9798ccd8e48ce3fcc83307
Files
-
21f9e5e26b9798ccd8e48ce3fcc83307.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2.2MB - Virtual size: 5.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE