Static task
static1
Behavioral task
behavioral1
Sample
27268e850c359b50d78e9c130559b222058facd86ae9abbc7da833c4c2f62580.exe
Resource
win7-20240611-en
General
-
Target
27268e850c359b50d78e9c130559b222058facd86ae9abbc7da833c4c2f62580
-
Size
1.3MB
-
MD5
535a548103d093f45d0711bfc4f6e592
-
SHA1
0f60661a5f69aba208832015f37a188f7c7f1adc
-
SHA256
27268e850c359b50d78e9c130559b222058facd86ae9abbc7da833c4c2f62580
-
SHA512
23f01c7d2c70e9db8d9c0365eefa447160d2bc8e14331bd7349322d4e2bfb011959e445e7f0a99009b3c46413fed9bfa9424030a551360e3c36b7cf7c1f1e94b
-
SSDEEP
24576:tmWrO2BbRILc0wiGCG34FFKSaonwSwQmsiK3AT8tc2k3BE:tusbRv7iGCG3G0onwSlj3AT8t6R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27268e850c359b50d78e9c130559b222058facd86ae9abbc7da833c4c2f62580
Files
-
27268e850c359b50d78e9c130559b222058facd86ae9abbc7da833c4c2f62580.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 591KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 64KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 3.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 630KB - Virtual size: 632KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE