Static task
static1
Behavioral task
behavioral1
Sample
27b2f859c0d62703087badc5c099bb373c53938528dc8ecb79b381bd9dcddff1.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
27b2f859c0d62703087badc5c099bb373c53938528dc8ecb79b381bd9dcddff1.exe
Resource
win10v2004-20230915-en
General
-
Target
27b2f859c0d62703087badc5c099bb373c53938528dc8ecb79b381bd9dcddff1.exe.zip
-
Size
27.7MB
-
MD5
55f7cf7816f65b3e0a0e8d855a8c9672
-
SHA1
74f26f99ecb40abae7ba8353b6c51371950f0506
-
SHA256
f96a9b2985e486bf062f07fc23a39562005d9b53334de06f3a5f3bb779809ac9
-
SHA512
99e648dba08bc3b0fe543bda322f11dfd680ac6e4327de449161f6cc80141d95db7672f3f58f922b121856dd98a9715c55dfdb6630ea836a19e610f9a308cb17
-
SSDEEP
786432:cSLpC+KZmv9EDyczKBIO+PJedn3LM6Co9m6vy:A+EmtIBGn5Cogky
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/27b2f859c0d62703087badc5c099bb373c53938528dc8ecb79b381bd9dcddff1.exe
Files
-
27b2f859c0d62703087badc5c099bb373c53938528dc8ecb79b381bd9dcddff1.exe.zip.zip
Password: infected
-
27b2f859c0d62703087badc5c099bb373c53938528dc8ecb79b381bd9dcddff1.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 28.7MB - Virtual size: 28.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 262KB - Virtual size: 262KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ