Static task
static1
Behavioral task
behavioral1
Sample
270ae5e76a75c90d5d06f14367060520c5fff0306d59860a07051ce410b7f0ff.exe
Resource
win10-20231023-en
General
-
Target
270ae5e76a75c90d5d06f14367060520c5fff0306d59860a07051ce410b7f0ff
-
Size
6.9MB
-
MD5
c70f4997f4f9a17c20d62b3b1aa7f021
-
SHA1
cc3ff587927a9a76784e141404e8a0d7aa10e066
-
SHA256
270ae5e76a75c90d5d06f14367060520c5fff0306d59860a07051ce410b7f0ff
-
SHA512
9a7edf9e8b6e5e768db40b3f72ce21d36ed64db2b55cfbc1781804026942c403d693c3642076a56ac6ed8d19e8d6a15ba3b98464887a01a10a50aee8feddfa71
-
SSDEEP
196608:DW0fKLtr95HARqIrmVY8S50UL8Kj8yTwHvWY3Nzj:DtO/hAPmVNyEWeNzj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 270ae5e76a75c90d5d06f14367060520c5fff0306d59860a07051ce410b7f0ff
Files
-
270ae5e76a75c90d5d06f14367060520c5fff0306d59860a07051ce410b7f0ff.exe windows:1 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 588B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ