Static task
static1
Behavioral task
behavioral1
Sample
427d27425bdeb9c2b5454d56af1165dfb6d6f0ab0e4b562a47bcc4fa0b9f8d7e.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
427d27425bdeb9c2b5454d56af1165dfb6d6f0ab0e4b562a47bcc4fa0b9f8d7e.exe
Resource
win10v2004-20230915-en
General
-
Target
427d27425bdeb9c2b5454d56af1165dfb6d6f0ab0e4b562a47bcc4fa0b9f8d7e
-
Size
538KB
-
MD5
4ad214411e0a2c26138710e398775ae1
-
SHA1
3590639c383bdff5cc3a954b5f8a1f5072925ce5
-
SHA256
427d27425bdeb9c2b5454d56af1165dfb6d6f0ab0e4b562a47bcc4fa0b9f8d7e
-
SHA512
9ed7d140bf0172863a0a14c27144ad60455409e9f136110a5fcb9a69a9d80be1a5e5101d71f65448af9db6ea871fbdf8a9e1e11510c8035717216f6776e7969b
-
SSDEEP
12288:alDach74+WMFVMulpAMCC1/vr6EsVG7q9/Dr:qDl4BvuvAMF1/vr6EBMr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 427d27425bdeb9c2b5454d56af1165dfb6d6f0ab0e4b562a47bcc4fa0b9f8d7e
Files
-
427d27425bdeb9c2b5454d56af1165dfb6d6f0ab0e4b562a47bcc4fa0b9f8d7e.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 528KB - Virtual size: 526KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ