Static task
static1
Behavioral task
behavioral1
Sample
7927b387090d54266d10525859908e01227706ed6daad35ea4f5de128f09f2c0.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
7927b387090d54266d10525859908e01227706ed6daad35ea4f5de128f09f2c0.exe
Resource
win10v2004-20230621-en
General
-
Target
7927b387090d54266d10525859908e01227706ed6daad35ea4f5de128f09f2c0
-
Size
136KB
-
MD5
59f24c6be2a1184fe4a3d054bf0ebc4a
-
SHA1
7991d5bfdcb2e0ddbff94b5d75b6a641fce2afbb
-
SHA256
7927b387090d54266d10525859908e01227706ed6daad35ea4f5de128f09f2c0
-
SHA512
ea9e64664ca9e399bc9ca0789afe4a7514fb3e69f2aa0cab97ae9ad3decf2607d59b7b6dc62e1917e7f7f10e988260620887b687bb35ddda83ab3965ebb7cc58
-
SSDEEP
3072:ae4jxhgVrCNRIzDS0ZZQBVI/wwBFz7hPsncVW1njb+U:ZIn4CvB0Z2BVE37FZk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7927b387090d54266d10525859908e01227706ed6daad35ea4f5de128f09f2c0
Files
-
7927b387090d54266d10525859908e01227706ed6daad35ea4f5de128f09f2c0.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 118KB - Virtual size: 300KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE