Static task
static1
Behavioral task
behavioral1
Sample
272a9e398b80947b08ab33f044591eed165b410823d0857caeb9207d6270c287.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
272a9e398b80947b08ab33f044591eed165b410823d0857caeb9207d6270c287.exe
Resource
win10v2004-20240226-en
General
-
Target
272a9e398b80947b08ab33f044591eed165b410823d0857caeb9207d6270c287
-
Size
6.9MB
-
MD5
b037d18475c23efef6d1df7e4b1479d6
-
SHA1
c3206d21d65b645f39a285b2b7e5a177f580ae90
-
SHA256
272a9e398b80947b08ab33f044591eed165b410823d0857caeb9207d6270c287
-
SHA512
9464bab4e8ffcf206dc6949bf752464c16106e48344c9d3b6481309b0bdb2ee25e2179e4db05733930ccaa3c0e2698ead67c66229f5f53bb6be04f2cd0e588a1
-
SSDEEP
196608:HdXFmSCCT/s/ijChuLnCVjRtHXyfsqsAdC:lFmSCCT/sapARtHiUMC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 272a9e398b80947b08ab33f044591eed165b410823d0857caeb9207d6270c287
Files
-
272a9e398b80947b08ab33f044591eed165b410823d0857caeb9207d6270c287.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
GVD0 Size: - Virtual size: 18.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
GVD1 Size: 205KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE