Static task
static1
Behavioral task
behavioral1
Sample
0b27461ca634d4d0829cda88f946725c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0b27461ca634d4d0829cda88f946725c.exe
Resource
win10v2004-20231215-en
General
-
Target
0b27461ca634d4d0829cda88f946725c
-
Size
966KB
-
MD5
0b27461ca634d4d0829cda88f946725c
-
SHA1
f50df39a0ea97ace8914602dc0528e2a760cd9af
-
SHA256
92b440cfe74b77457eae1df0ff6273de5534060754919b7c47b3f0d705a8591b
-
SHA512
feae5eef5309c5353d6a806dd2aba754b85e0b03fbfaf3d96bd548d1cc0f8ecad2ce42d0a2e5f1ffdd1f69db2ee2f4a34b03ece4c21a811160787c0e476b3540
-
SSDEEP
12288:+AOQu8/GJAIEnsFqdxlpsrQsLhBN9aTom5OunaaNxjbUk:+Ag8/8ABsUohf9aTXEubjgk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b27461ca634d4d0829cda88f946725c
Files
-
0b27461ca634d4d0829cda88f946725c.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 948KB - Virtual size: 948KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ