Static task
static1
Behavioral task
behavioral1
Sample
4b27fd5c70588d922a25f658f35d5c5d3e0085ba88d9bb9b25746c52b2b58e59.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4b27fd5c70588d922a25f658f35d5c5d3e0085ba88d9bb9b25746c52b2b58e59.exe
Resource
win10v2004-20240802-en
General
-
Target
4b27fd5c70588d922a25f658f35d5c5d3e0085ba88d9bb9b25746c52b2b58e59.exe
-
Size
975KB
-
MD5
c10cc05f3b3d59c92b1ae9cd99246cb8
-
SHA1
cea0bad5af7ab2ea03da693f3857b65a46dab466
-
SHA256
4b27fd5c70588d922a25f658f35d5c5d3e0085ba88d9bb9b25746c52b2b58e59
-
SHA512
6c376226cfab1ecabb37da2905ef902fa330a82a9e242114b3a431272dab4bd2166ec86a1ec3082656639307c4d1c9f5e697f30806c5ff9d6b6784e47004ad26
-
SSDEEP
12288:v+MGl+GaMWxv1rA69EqPo3La38yUhsGdxZ66ciFOFKXz9BUal9pU9b9JfyV0RSbq:JGaMsv1r7D6Lasya6pFyBUmU9nu1b9s
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b27fd5c70588d922a25f658f35d5c5d3e0085ba88d9bb9b25746c52b2b58e59.exe
Files
-
4b27fd5c70588d922a25f658f35d5c5d3e0085ba88d9bb9b25746c52b2b58e59.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 973KB - Virtual size: 972KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ