Static task
static1
Behavioral task
behavioral1
Sample
2ef27fa82c3c977f1128de5831611b44.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2ef27fa82c3c977f1128de5831611b44.exe
Resource
win10v2004-20231215-en
General
-
Target
2ef27fa82c3c977f1128de5831611b44
-
Size
151KB
-
MD5
2ef27fa82c3c977f1128de5831611b44
-
SHA1
1e852db1b5dcb43f6147727b72d8fcf717f77842
-
SHA256
e4b0db0dd414c94aa51529125c6053762d9788f1044ac614fe807e82f35fda69
-
SHA512
528189c2fb3280eab61ef88a66989a09fdc576313bf8ed03aa21e98dccb5853f34d5e5acbb31ef59ee9edc55a2c12fa562de44b6dff756bf1f2df8e895232f41
-
SSDEEP
3072:9V8QIQO+WwUUzmSKNxUFikjWSuq/RLWK0cnJQmR:cnrwmbx6nRKKJJXR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ef27fa82c3c977f1128de5831611b44
Files
-
2ef27fa82c3c977f1128de5831611b44.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 864KB - Virtual size: 860KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 664B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ