Static task
static1
Behavioral task
behavioral1
Sample
27w3cbbC85qPnmx.exe
Resource
win7-20230712-en
General
-
Target
c660981f4d7d78a946af9e8e3926a3c73a1380fa4aadc89c1fb51885e4b66eb4
-
Size
611KB
-
MD5
dad5e3f788cc4135268379ce8ad855b2
-
SHA1
d76101209fbfdd27a765e39605b005ec4477d059
-
SHA256
c660981f4d7d78a946af9e8e3926a3c73a1380fa4aadc89c1fb51885e4b66eb4
-
SHA512
89fcc185912d253657090ec3cf0f66d6997249b80f703e92944446ba84a73208d741bc1cb62731253a6fc12e3e1cf200376a3a43cad5423dacfe6b89785620c0
-
SSDEEP
12288:gCY0lvmbQDxugAJMU1jIKJ7T9M+uXq6HYumNrnJTGOd05BGtTEuNMRrwJj:HYePugAeUdK+ALH7mzTD05BGMRrYj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/27w3cbbC85qPnmx.exe
Files
-
c660981f4d7d78a946af9e8e3926a3c73a1380fa4aadc89c1fb51885e4b66eb4.zip
-
27w3cbbC85qPnmx.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 952KB - Virtual size: 951KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ