afxinfmsge
Static task
static1
Behavioral task
behavioral1
Sample
7b27de77ef4575f2f472208930a98dc3.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7b27de77ef4575f2f472208930a98dc3.exe
Resource
win10v2004-20231215-en
General
-
Target
7b27de77ef4575f2f472208930a98dc3
-
Size
9KB
-
MD5
7b27de77ef4575f2f472208930a98dc3
-
SHA1
85adeeeb65aa08d28a883b029757b574348a8fd5
-
SHA256
d326dc31ad3d583cd4ade7b3f139228dd5526e6d49784c5bf958553ebfeb4eb6
-
SHA512
db6cf5fbd0a8ccffba467d732789d3591047ad7578860ef82ab378fd3d9753e8151df30e9863c6df80527178c02e2bffa3f4fbcec0951bd787ec7897671ae619
-
SSDEEP
192:Uoc9ZAPqTWSnRqguvC6h5im7nr2GocWzgLc/J2tm:Ub9uPSR6vC6XFoPSc/J2t
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7b27de77ef4575f2f472208930a98dc3
Files
-
7b27de77ef4575f2f472208930a98dc3.exe windows:4 windows x86 arch:x86
5956d710a9aca8a8bb88faec16ed2f9e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
LoadLibraryA
VirtualProtect
Exports
Exports
Sections
Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE