Static task
static1
Behavioral task
behavioral1
Sample
c21620c63622222096d63e3e58c9e9ee2883bee1a3f7071ff343edebd451d706.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c21620c63622222096d63e3e58c9e9ee2883bee1a3f7071ff343edebd451d706.exe
Resource
win10v2004-20240802-en
General
-
Target
c21620c63622222096d63e3e58c9e9ee2883bee1a3f7071ff343edebd451d706
-
Size
1.8MB
-
MD5
f5e6c8c354d9cc3c8a3b4cec72fadcd9
-
SHA1
a737cbed4c06197a73ed3745fa0596727ce3ef97
-
SHA256
c21620c63622222096d63e3e58c9e9ee2883bee1a3f7071ff343edebd451d706
-
SHA512
6f92505f96097e8f33c9d253b6fb7df1127b35423eb58483dd5bd1281fd19132e4ae6fc32063f73ff0519dae24de63d60cf35169a9a88c201fe1713e0c8e34bb
-
SSDEEP
24576:ZvJGNR/W73khFBcogd4xiLSU56SxdhTKCydfHsUyiResuM9wel0Wb5yxDRSQx0nW:RgNSuFYfLSj8EFsUysXuM9r29EQ6nW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c21620c63622222096d63e3e58c9e9ee2883bee1a3f7071ff343edebd451d706
Files
-
c21620c63622222096d63e3e58c9e9ee2883bee1a3f7071ff343edebd451d706.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xowibfpq Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zzfpkaaq Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE