Static task
static1
Behavioral task
behavioral1
Sample
c27132aa1c08b6c8b73d58af7c602d551e4a0ca5d537fb687f7b9849885c5518.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
c27132aa1c08b6c8b73d58af7c602d551e4a0ca5d537fb687f7b9849885c5518.exe
Resource
win10v2004-20230703-en
General
-
Target
c27132aa1c08b6c8b73d58af7c602d551e4a0ca5d537fb687f7b9849885c5518
-
Size
139KB
-
MD5
19640c689ae156f2c92a74c690d0d414
-
SHA1
faa65db9f94f542e78c29673b5bacf6c439dc791
-
SHA256
c27132aa1c08b6c8b73d58af7c602d551e4a0ca5d537fb687f7b9849885c5518
-
SHA512
905004c6343fe7d97fc3079621c38c73c07a9465168519731f129075414fd6549cc1d79b29d0bae93bb34ec8040b42d8df71a876b36f70e2a46e548832ae68e3
-
SSDEEP
3072:9N1ltsjMn5dQn9pTdtsDT4YckDJMOi16x889EIre8:/1zsjM5Wn9pTkDTrMZ1UpS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c27132aa1c08b6c8b73d58af7c602d551e4a0ca5d537fb687f7b9849885c5518
Files
-
c27132aa1c08b6c8b73d58af7c602d551e4a0ca5d537fb687f7b9849885c5518.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 300KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 78KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.WYCao Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ