Static task
static1
Behavioral task
behavioral1
Sample
27b1724f0c327105ba38a978d4f2d085.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
27b1724f0c327105ba38a978d4f2d085.exe
Resource
win10v2004-20231215-en
General
-
Target
27b1724f0c327105ba38a978d4f2d085
-
Size
5.8MB
-
MD5
27b1724f0c327105ba38a978d4f2d085
-
SHA1
78b8139ee6692d62eec99cf4614b73b224d704ea
-
SHA256
57bc25d7b4f1cbef358b3cad5360ca01d3bf5b24b02b725890d4cd76320923ee
-
SHA512
c92eb0f7b9f0dd1385df6c93e15dd71f54ecb6215f80df2d2770ecfc53e232a1e5a7a09f9fffbda6504284d9a4298ce84ae601b88820d3cc7d432345ea77ce80
-
SSDEEP
98304:7WK9DBockGjSgTtLxi6rMxmtuNy7vuZSQ1WHNme3rEYnl3ommBM03wRGIEx:CctTkGjSA1ximtmavuHAFYY6m6M03X
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27b1724f0c327105ba38a978d4f2d085
Files
-
27b1724f0c327105ba38a978d4f2d085.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 367KB - Virtual size: 366KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 5.4MB - Virtual size: 5.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ