Static task
static1
Behavioral task
behavioral1
Sample
21ce3c49defce496a8a0a0cf5d64f41db855def8e92fa51eb216610720050ad4.exe
Resource
win10v2004-20231215-en
General
-
Target
21ce3c49defce496a8a0a0cf5d64f41db855def8e92fa51eb216610720050ad4
-
Size
505KB
-
MD5
e2123224248f06beb3a00a46b5fa49dd
-
SHA1
074690f6756106f383eef9d051f707c7e95b9b32
-
SHA256
21ce3c49defce496a8a0a0cf5d64f41db855def8e92fa51eb216610720050ad4
-
SHA512
1d9b1f596cb5e78af1d9b0a5627a3000e57cd27b7163243da751f1a98735ad562eb09cf05fcb588373ebe4bf4eeb598b4dec3db42add1a7919f5fbff7f1bf9a4
-
SSDEEP
6144:jre8uT58rY642SGXvDAgRGe9xEbdHAXnzAMubnYlxhNWG/wRiTIeVf+Utz8:jqx58rYSdke+mnz5sCNT/vXVfnh8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 21ce3c49defce496a8a0a0cf5d64f41db855def8e92fa51eb216610720050ad4
Files
-
21ce3c49defce496a8a0a0cf5d64f41db855def8e92fa51eb216610720050ad4.exe windows:5 windows x86 arch:x86
9b59fefe51f9320ef06302fa1d57096f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLocaleInfoA
IsBadHugeReadPtr
GetCommState
SetDefaultCommConfigW
HeapFree
GetComputerNameW
LockFile
ConnectNamedPipe
GetModuleHandleW
GetDateFormatA
GetConsoleCP
GlobalAlloc
VirtualFreeEx
LoadLibraryW
GetConsoleAliasExesLengthW
GetConsoleAliasesLengthW
SetConsoleTitleA
SetCurrentDirectoryA
GetCurrentDirectoryW
GetProcAddress
FindVolumeMountPointClose
LoadLibraryA
HeapWalk
GetModuleFileNameA
FindFirstVolumeMountPointA
FreeEnvironmentStringsW
DeleteCriticalSection
SetCalendarInfoA
CloseHandle
CreateFileW
EnumCalendarInfoA
GetAtomNameW
HeapReAlloc
HeapAlloc
ExitProcess
DecodePointer
GetCommandLineW
HeapSetInformation
GetStartupInfoW
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
GetLastError
IsProcessorFeaturePresent
WriteFile
GetStdHandle
GetModuleFileNameW
HeapCreate
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
WideCharToMultiByte
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
Sleep
RtlUnwind
HeapSize
SetStdHandle
WriteConsoleW
MultiByteToWideChar
LCMapStringW
GetStringTypeW
FlushFileBuffers
user32
LoadIconA
advapi32
RegCreateKeyA
ReadEventLogW
Sections
.text Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 345KB - Virtual size: 345KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 111KB - Virtual size: 111KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ