d21ee7e1d7a22971fddf10faf6155eb4240392a1f8724b9e9245445c4b206409
- SHA256 d21ee7e1d7a22971fddf10faf6155eb4240392a1f8724b9e9245445c4b206409
Password
infected
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
508582d8d933543402be17c2a6908890d1cecb5ec65be9e565991a8b8916c37c.exe
Resource
win7-20240903-en
windows7-x64
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
508582d8d933543402be17c2a6908890d1cecb5ec65be9e565991a8b8916c37c.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
15 signatures
150 seconds
General
- Target d21ee7e1d7a22971fddf10faf6155eb4240392a1f8724b9e9245445c4b206409
- Size 1.0MB
- Sample241109-kwe3rs1grd
- SHA256 d21ee7e1d7a22971fddf10faf6155eb4240392a1f8724b9e9245445c4b206409
- MD5 a4d530c712aaec1934529092e9018582
- SHA1 8ef442db850b4b411b943553fc73fd8f3a8adb1b
- SHA512 184923e6ca637e36be94a7613bac0aa1867360eb001690af40a968620f04fbd05e5c65cdb0fa2cf8ed049fc3eeb915f57a3a5a79447aa932fdac5c62454d5921
- SSDEEP 24576:mMl0JKX8Sp2RIHwvm2345JvC7WgjjX0xaqqPA9sROYspaqG9g:m/82nv1LPjjXAaqL9sROYsp7
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/508582d8d933543402be17c2a6908890d1cecb5ec65be9e565991a8b8916c37c.exe
File Explorer
-
d21ee7e1d7a22971fddf10faf6155eb4240392a1f8724b9e9245445c4b206409.zip 1.0MB
-
508582d8d933543402be17c2a6908890d1cecb5ec65be9e565991a8b8916c37c.exe.exe 1.2MB
508582d8d933543402be17c2a6908890d1cecb5ec65be9e565991a8b8916c37c.exe
- IMPHASH 9c97db954c6eab8dfde4a4fd207d98cc
- SHA256 508582d8d933543402be17c2a6908890d1cecb5ec65be9e565991a8b8916c37c
- MD5 1214df11a36eaecc89d36818bdf5e1eb
- SHA1 e27a8a2ee9b26a3546e6c826ba26d691d74d3bcf
- SHA512 d0ee47926625fdd30d293760318689bc8d974a20b4eec975e0304fe2299f0606ea425d3bbef3afc843c20b4008d09e5bac54cef3904db848aca8eec027845899
- SSDEEP 24576:C1F4VX4ZsIETa80JWFst9LqGfEBz9terTMH9MbMx9upUenl6O:C1FWWbETahMszqGfu0rYHqbMxQpPl
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
5
Entry point
20680
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\sigizecem\xigago\tukonunoz_givizadi\yodawusafix\11\j.pdb
kernel32
GetLogicalDriveStringsW
SetDefaultCommConfigW
CreateHardLinkA
GetConsoleAliasesA
LoadLibraryW
_hread
IsBadCodePtr
CreateEventA
FormatMessageW
GetFileAttributesA
GetExitCodeProcess
SetConsoleMode
WriteConsoleW
WritePrivateProfileSectionW
ChangeTimerQueueTimer
SetLastError
GetProcAddress
GlobalAddAtomA
EnumSystemCodePagesW
LocalAlloc
FoldStringA
FreeEnvironmentStringsW
VirtualProtect
GetWindowsDirectoryW
GetFileInformationByHandle
GlobalReAlloc
InterlockedPushEntrySList
LCMapStringW
CloseHandle
CreateFileA
HeapSize
lstrcpynA
CallNamedPipeA
VirtualAlloc
GetVolumeNameForVolumeMountPointA
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
GetLastError
HeapFree
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetModuleFileNameA
GetModuleFileNameW
GetEnvironmentStringsW
GetCommandLineW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapReAlloc
InitializeCriticalSectionAndSpinCount
RtlUnwind
MultiByteToWideChar
LoadLibraryA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
LCMapStringA
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
FlushFileBuffers
RaiseException
user32
ClientToScreen
LoadMenuA
InvalidateRgn
GetMenuInfo
MessageBoxIndirectW
CountClipboardFormats
SetScrollInfo
gdi32
GetGlyphIndicesW
advapi32
RegOpenKeyA
Name
.text
Size
1.0MB
Virtual Size
1.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
9KB
Virtual Size
38.7MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
106KB
Virtual Size
105KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
32KB
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=43, id=132, productName=VS2008 build 21022, version=21022,
count=17, id=149, productName=VS2008 build 21022, version=21022,
count=105, id=131, productName=VS2008 build 21022, version=21022,
count=9, id=123, productName=VS2005 build 50727, version=50727,
count=125, id=1, productName=Unmarked objects,
count=1, id=138, version=21022,
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,