Static task
static1
Behavioral task
behavioral1
Sample
f27c2a6fc28a8bd89e5a1ac76f4b9f2b1c7c2d836911b3093dd55d65632e3105.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
f27c2a6fc28a8bd89e5a1ac76f4b9f2b1c7c2d836911b3093dd55d65632e3105.exe
Resource
win10v2004-20230831-en
General
-
Target
f27c2a6fc28a8bd89e5a1ac76f4b9f2b1c7c2d836911b3093dd55d65632e3105
-
Size
4.7MB
-
MD5
36a2bffa44dfd51453139cce0d0f730a
-
SHA1
70f0ca0e3d65a0050833f135bf52d4d83d03e672
-
SHA256
f27c2a6fc28a8bd89e5a1ac76f4b9f2b1c7c2d836911b3093dd55d65632e3105
-
SHA512
8792476459c8fc350b4eb20f02b3ed5a4149616928936b598162aa8495357757fe9fbe6f45732a4613b4a2f0c4132aea5ba3ecc5510fe41e384d0392deabd4db
-
SSDEEP
49152:b6xoukB1RUbDMeetu9866Ckzy6aPBJpKPLQfXGxgXhwa:bzebDOeEgzYPaXnxw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f27c2a6fc28a8bd89e5a1ac76f4b9f2b1c7c2d836911b3093dd55d65632e3105
Files
-
f27c2a6fc28a8bd89e5a1ac76f4b9f2b1c7c2d836911b3093dd55d65632e3105.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 4.5MB - Virtual size: 4.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 110KB - Virtual size: 109KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ