Static task
static1
Behavioral task
behavioral1
Sample
27236bac216d7a3321607a5a7d37635e.exe
Resource
win7-20231201-en
Behavioral task
behavioral2
Sample
27236bac216d7a3321607a5a7d37635e.exe
Resource
win10v2004-20231201-en
General
-
Target
27236bac216d7a3321607a5a7d37635e
-
Size
1.5MB
-
MD5
27236bac216d7a3321607a5a7d37635e
-
SHA1
e531689df71180440f4a98a61929bd5afc2ed498
-
SHA256
3d1bb666ca946851d059b995e30063a6cd8aaa69d89edfd190b490787c0c6331
-
SHA512
7d5f75f1e68df8d8f511480f21a0830cac341c70c9a5f954252e475467c12aef0a92cd52db4ab31c04a0c49aa83305b4a5ecb819fa338cab40e4e1b559900dfc
-
SSDEEP
49152:lrq0R07QQmBty8h1HfIXWpT364/Y8mr3x:hq0+78ngXI3jYB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27236bac216d7a3321607a5a7d37635e
Files
-
27236bac216d7a3321607a5a7d37635e.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 484KB - Virtual size: 716KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1.0MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
petite Size: 676B - Virtual size: 676B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ