Static task
static1
Behavioral task
behavioral1
Sample
21c82ce94a78ffa347bd3f8be0536c5d1f444af0e8513ad12b8415c729bc8c13.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
21c82ce94a78ffa347bd3f8be0536c5d1f444af0e8513ad12b8415c729bc8c13.exe
Resource
win10v2004-20240226-en
General
-
Target
21c82ce94a78ffa347bd3f8be0536c5d1f444af0e8513ad12b8415c729bc8c13
-
Size
46KB
-
MD5
ee534517418a9edad1d439e69e815506
-
SHA1
4c65c737c2c6ca4bf20a2f2ac3f4f7f4b05d393a
-
SHA256
21c82ce94a78ffa347bd3f8be0536c5d1f444af0e8513ad12b8415c729bc8c13
-
SHA512
841685762c3f3d7c20763c319db91ffa4470c962f0d887bb2e7722af6292001af1681d96d2f92665ff021e60bf7f3924ceb5bffd80a6f4c224f500707d32f597
-
SSDEEP
768:kwv9yXNJkBOTLk7FFn+dpeGVpfwqyGyW//iajE/5Q007d21a1Xlu9firwP:kwv9yX3kziyUjiQ007k1sXci
Malware Config
Signatures
-
Detects Windows executables referencing non-Windows User-Agents 1 IoCs
resource yara_rule sample INDICATOR_SUSPICIOUS_EXE_NoneWindowsUA -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 21c82ce94a78ffa347bd3f8be0536c5d1f444af0e8513ad12b8415c729bc8c13
Files
-
21c82ce94a78ffa347bd3f8be0536c5d1f444af0e8513ad12b8415c729bc8c13.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.data Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ