Static task
static1
Behavioral task
behavioral1
Sample
27034ac2808028eb14cb9c393a3ac3a8.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
27034ac2808028eb14cb9c393a3ac3a8.exe
Resource
win10v2004-20231222-en
General
-
Target
27034ac2808028eb14cb9c393a3ac3a8
-
Size
1.7MB
-
MD5
27034ac2808028eb14cb9c393a3ac3a8
-
SHA1
affba933fd456b79d157bd695dbf645972e2e102
-
SHA256
fbdee1b1e56f97fccee4f4b5f0c5156ebab95f3dfabb6e74069492ad9d0086f4
-
SHA512
2d10590a6391861b68e671601bea68fb95ca2f7179be43fdcd1072185f54b3fd92d46af6dc21c51b89e226abaab84f8b9ca9d6e05fe9bf6360aed2eb789e36f4
-
SSDEEP
24576:MmDtaLg/DRZhf0deU/N9M+ugdM4WC6wK3Mu2EPlG4Dt3YZ3y77SI8LUlFl5Fp+:MmDta4NDtoZgcY/+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27034ac2808028eb14cb9c393a3ac3a8
Files
-
27034ac2808028eb14cb9c393a3ac3a8.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 153KB - Virtual size: 153KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 178KB - Virtual size: 178KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.c2r Size: 512B - Virtual size: 340B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ