Static task
static1
Behavioral task
behavioral1
Sample
27ecfe8d248b684c9c9d8e70e45bd972.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
27ecfe8d248b684c9c9d8e70e45bd972.exe
Resource
win10v2004-20231215-en
General
-
Target
27ecfe8d248b684c9c9d8e70e45bd972
-
Size
80KB
-
MD5
27ecfe8d248b684c9c9d8e70e45bd972
-
SHA1
516bf56672dcf9711e27da5aa752984305275d45
-
SHA256
c5aa4c66dbbabec2b2aeb1a0a139230d6e64cb2c2fd19cfd27e248301f0eea85
-
SHA512
a80f01c263402f6bbe71c6abb1331a76123dcae71fc10aeb8b28d66c547a11f0cab8e3141a98cfa7ba1b0b38a6f32b5b7b78f65780aef7a319ad2466e327fcff
-
SSDEEP
1536:/B8SRdyqsMKYD6kiuVPDmk3wF570n6rGkROR4x816:J8SRkqsQ6ADmiy570niGAk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27ecfe8d248b684c9c9d8e70e45bd972
Files
-
27ecfe8d248b684c9c9d8e70e45bd972.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
Size: 12KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.x01 Size: 16KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yP Size: 16KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE