Static task
static1
Behavioral task
behavioral1
Sample
21cc4b252c5c1acd98a075a299e7a929e53138ec3ee4e5b66920e3d8107440b4N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
21cc4b252c5c1acd98a075a299e7a929e53138ec3ee4e5b66920e3d8107440b4N.exe
Resource
win10v2004-20240802-en
General
-
Target
21cc4b252c5c1acd98a075a299e7a929e53138ec3ee4e5b66920e3d8107440b4N
-
Size
252KB
-
MD5
e4ed055c8bb12f3e97eed72634b41be0
-
SHA1
0906b7fc355f475695799cc046b7d496bd2346fa
-
SHA256
21cc4b252c5c1acd98a075a299e7a929e53138ec3ee4e5b66920e3d8107440b4
-
SHA512
5980e7a22d1d952df78f0e70191fd1fbf0ff10e2381937a9cbf1f16b073d56d1346a9308b8a938b16e4efcc69cbc7c3a65418ff246de12d9e0a62a0f44126435
-
SSDEEP
6144:i8qTImoqYir+SU/cxnBcPJxFByfzV5QNCxcMg3iaTP1QScfhV:2IqYiKS2cxBKJxkV5QpD3iaTPeScP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 21cc4b252c5c1acd98a075a299e7a929e53138ec3ee4e5b66920e3d8107440b4N
Files
-
21cc4b252c5c1acd98a075a299e7a929e53138ec3ee4e5b66920e3d8107440b4N.exe windows:5 windows x86 arch:x86
f433e7fcc51e68080022754836705744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree
user32
MessageBoxA
Sections
.text Size: 135KB - Virtual size: 364KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sqlvq3m0 Size: - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zxyjjb4z Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
9uxvjzp7 Size: - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
idiqimlq Size: 115KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jx0a3d.e Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ