Static task
static1
Behavioral task
behavioral1
Sample
21bd092e4862959436dfae79d3189beb55e92c636518eec4788d6543039a840b.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral2
Sample
21bd092e4862959436dfae79d3189beb55e92c636518eec4788d6543039a840b.exe
Resource
win11-20240709-en
General
-
Target
21bd092e4862959436dfae79d3189beb55e92c636518eec4788d6543039a840b
-
Size
614KB
-
MD5
b220564020d7fea1b2fef8a4eccd6614
-
SHA1
a6fdc192a41de5574adbaddaa14ab8f3bab4be0e
-
SHA256
21bd092e4862959436dfae79d3189beb55e92c636518eec4788d6543039a840b
-
SHA512
8176ac4e217294302079a007070d59a150faf283f86a671d28311960e5c6e81ff5ae1c9ac3342a6e56a557399d8b6d1a2d008ec71e4bc0d5473cc84c52fabd6f
-
SSDEEP
6144:WbLkzQCMN4GF4JS20kPMDUZoUfdclmlJJFz7VkHxu6kxG1CCULCsFaaGF6oB:WbLkU/+JS20kPMoblcIJtkH0SsCUsa5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 21bd092e4862959436dfae79d3189beb55e92c636518eec4788d6543039a840b
Files
-
21bd092e4862959436dfae79d3189beb55e92c636518eec4788d6543039a840b.exe windows:5 windows x86 arch:x86
def745e62858e9ac0dee4801e550d289
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindResourceW
LocalCompact
WriteConsoleInputA
GetModuleHandleW
GetWindowsDirectoryA
GetDateFormatA
SetProcessPriorityBoost
LoadLibraryW
FreeConsole
CreateEventA
GetModuleFileNameW
GetACP
IsBadStringPtrA
ReplaceFileA
CreateDirectoryA
GetLastError
SetLastError
SetEndOfFile
GlobalFree
CreateFileMappingA
LocalAlloc
AddVectoredExceptionHandler
GlobalFindAtomW
EnumResourceTypesW
GetWindowsDirectoryW
SetFileAttributesW
RaiseException
HeapReAlloc
HeapAlloc
GetStringTypeW
MultiByteToWideChar
CommConfigDialogA
GetProcAddress
CreateFileA
LCMapStringW
HeapSize
RtlUnwind
Sleep
IsValidCodePage
HeapFree
GetCommandLineA
HeapSetInformation
GetStartupInfoW
IsProcessorFeaturePresent
HeapCreate
SetUnhandledExceptionFilter
ExitProcess
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
UnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetOEMCP
user32
GetKeyboardLayoutNameA
SetMessageExtraInfo
GetCaretPos
CharUpperBuffA
GetClassInfoW
InsertMenuItemW
ShowCursor
advapi32
CopySid
ClearEventLogA
ole32
CoSuspendClassObjects
CoUnmarshalHresult
winhttp
WinHttpOpen
Sections
.text Size: 412KB - Virtual size: 412KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 146KB - Virtual size: 36.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ