Static task
static1
Behavioral task
behavioral1
Sample
21aff5d45ec750f056a2bc830d793bd0N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
21aff5d45ec750f056a2bc830d793bd0N.exe
Resource
win10v2004-20240709-en
General
-
Target
21aff5d45ec750f056a2bc830d793bd0N.exe
-
Size
6.3MB
-
MD5
21aff5d45ec750f056a2bc830d793bd0
-
SHA1
9c9075a0c40194f982c81ddab0d63cc3ddad878a
-
SHA256
7ff15c7e81593451208b44360ba596f2b2834e42effed6ea7b49f9f8940719c9
-
SHA512
000f7de24ec0f99ab6d77a9ab0720a53cfaa89d9f4d8ee489545815b3353913605217d700a270eaaea8375e84faee3dd0b58647fe4c116c410a3bb1f5cb6387e
-
SSDEEP
98304:S6/O18WE7mnyOCVLmHIDuf0gL1Z9HHsPXmM7vpR:01Q7mn8VSHv0gpZYF7hR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 21aff5d45ec750f056a2bc830d793bd0N.exe
Files
-
21aff5d45ec750f056a2bc830d793bd0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 3.0MB - Virtual size: 3.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 70KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 17KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 33B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 190KB - Virtual size: 189KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3.1MB - Virtual size: 3.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ