Static task
static1
Behavioral task
behavioral1
Sample
21e7743ee49b00d201af99fbd9fc0a430032f416070834294b12f3ea2c12b48d.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
21e7743ee49b00d201af99fbd9fc0a430032f416070834294b12f3ea2c12b48d.exe
Resource
win10v2004-20240419-en
General
-
Target
21e7743ee49b00d201af99fbd9fc0a430032f416070834294b12f3ea2c12b48d.exe
-
Size
692KB
-
MD5
0b04411270e5509d63ac947c5ea354bd
-
SHA1
0c8baf1ac83c9fded7617691f34b9448eeb898cc
-
SHA256
21e7743ee49b00d201af99fbd9fc0a430032f416070834294b12f3ea2c12b48d
-
SHA512
2b472c92f644e9997a6cac84b02b6b2e6e87230cbec4ba253a7a6516763d286dbb300ffe74d535c2dcf48b2377ce78cf79d4457f07bc7590365abaa26a928b87
-
SSDEEP
12288:HUeoUNewB3dehnOKp3h6c5QsZviKyqv01BoogjVj7REap7H5E8sL52Vfs+ng6:p1dghn1YcisZryvB+vtp7HeLUL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 21e7743ee49b00d201af99fbd9fc0a430032f416070834294b12f3ea2c12b48d.exe
Files
-
21e7743ee49b00d201af99fbd9fc0a430032f416070834294b12f3ea2c12b48d.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 680KB - Virtual size: 678KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ