Static task
static1
Behavioral task
behavioral1
Sample
21a9481e7c550baafc82ba0cdd792a669a869ae7715993368eeaca800814cf90.exe
Resource
win7-20241023-en
General
-
Target
21a9481e7c550baafc82ba0cdd792a669a869ae7715993368eeaca800814cf90.exe
-
Size
322KB
-
MD5
e7a39d1c95a0d6edcda94874d38987c2
-
SHA1
2d89691d491a2ec3f15911406a221ad135e964e8
-
SHA256
21a9481e7c550baafc82ba0cdd792a669a869ae7715993368eeaca800814cf90
-
SHA512
41059816703d71427e0e9ed6a260448f25808e00c159de58eaa8f0d6a6538406bbfbf76c8d8fcc0653959175009c3b20187ddd02dd4f0ca5cd51cedde528485d
-
SSDEEP
6144:vjv17LBCG5mOq+WEosDCrE/NKbO3gcbf2MPD6zqAZkVGDoJHk:vjd7dCEmOqTEos6MgAgcbJPQqASVGD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 21a9481e7c550baafc82ba0cdd792a669a869ae7715993368eeaca800814cf90.exe
Files
-
21a9481e7c550baafc82ba0cdd792a669a869ae7715993368eeaca800814cf90.exe.exe windows:5 windows x86 arch:x86
dc981e06c9da20112707702b1b1b2bde
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetLocaleInfoA
EnumCalendarInfoA
WriteConsoleInputW
InterlockedIncrement
InterlockedDecrement
GetCurrentProcess
InterlockedCompareExchange
SetComputerNameW
FreeEnvironmentStringsA
EnumCalendarInfoExW
GetWindowsDirectoryA
EnumTimeFormatsW
SetCommConfig
SwitchToFiber
ReadConsoleInputA
GetAtomNameW
FindNextVolumeMountPointW
LCMapStringA
InterlockedExchange
GetLogicalDriveStringsA
GetLastError
SetLastError
GetProcAddress
VirtualAlloc
CreateJobSet
EnumSystemCodePagesW
LoadLibraryA
OpenEventA
FindNextFileA
EnumDateFormatsA
GetModuleHandleA
GetShortPathNameW
GetVersionExA
GetCurrentProcessId
FindNextVolumeA
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TerminateProcess
IsDebuggerPresent
HeapAlloc
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
HeapSize
MultiByteToWideChar
ReadFile
EnterCriticalSection
LeaveCriticalSection
HeapFree
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
SetFilePointer
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
SetStdHandle
RaiseException
GetLocaleInfoA
WideCharToMultiByte
LCMapStringW
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
FlushFileBuffers
CloseHandle
user32
OemToCharA
DdeQueryStringA
GetWindowTextLengthA
shell32
DragQueryPoint
Sections
.text Size: 263KB - Virtual size: 262KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ