Static task
static1
Behavioral task
behavioral1
Sample
6b27421b97615967d44ffcc33756dadd.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6b27421b97615967d44ffcc33756dadd.exe
Resource
win10v2004-20231222-en
General
-
Target
6b27421b97615967d44ffcc33756dadd
-
Size
89KB
-
MD5
6b27421b97615967d44ffcc33756dadd
-
SHA1
26e07536db4847f476de64659336c4f1a505d92b
-
SHA256
8ea377d2537ea2871372bab8c0085167871d4f6dae615d570f5e0ca2ca3e968d
-
SHA512
f44084e66ce7ad79e5eff8fea9811efae9fcd1a48f97ddab57c53dd08a9c80392a93eba3bf9ec3e11339e5728e7e4f6e3d44b00492b96a20c20fce0f0f8a902c
-
SSDEEP
1536:NgpHhWKayGb7yns1sm1nQnzwgoR4sLOg18wodLFKgrobvqGikbp+sP:NgpH0ycys1scQnzboRRlRodLtolRp5P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6b27421b97615967d44ffcc33756dadd
Files
-
6b27421b97615967d44ffcc33756dadd.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 163KB - Virtual size: 163KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 69KB - Virtual size: 163KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ