Static task
static1
Behavioral task
behavioral1
Sample
27fd1e7795889ec54e7acb6947c8e078370167f3bb379655cf19e493451c6b5b.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
27fd1e7795889ec54e7acb6947c8e078370167f3bb379655cf19e493451c6b5b.exe
Resource
win10v2004-20240426-en
General
-
Target
27fd1e7795889ec54e7acb6947c8e078370167f3bb379655cf19e493451c6b5b
-
Size
12KB
-
MD5
527b702eab2d05639ce59e0839d03fdd
-
SHA1
99f534f9b56fbf9465eb5ac0c92a49ba38dc3142
-
SHA256
27fd1e7795889ec54e7acb6947c8e078370167f3bb379655cf19e493451c6b5b
-
SHA512
4044d75f66c3700f6d68f4ffde26a6cd463daa945cea7308f2c034f2c48617f52d08a9db13274409c803c7c7f191ad13887e61ab3387c42470f75abc92ac66da
-
SSDEEP
384:vL7li/2z4q2DcEQvdQcJKLTp/NK9xa0J:DUMCQ9c0J
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27fd1e7795889ec54e7acb6947c8e078370167f3bb379655cf19e493451c6b5b
Files
-
27fd1e7795889ec54e7acb6947c8e078370167f3bb379655cf19e493451c6b5b.exe .ps1 windows:4 windows x86 arch:x86 polyglot
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ