Static task
static1
Behavioral task
behavioral1
Sample
27dcf9852c0ce5f009d95f01dfe56051bd8d79c3dc3a5b8dad047b973dcd2c03.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
27dcf9852c0ce5f009d95f01dfe56051bd8d79c3dc3a5b8dad047b973dcd2c03.exe
Resource
win10v2004-20240802-en
General
-
Target
27dcf9852c0ce5f009d95f01dfe56051bd8d79c3dc3a5b8dad047b973dcd2c03
-
Size
75KB
-
MD5
0bd6cd40f5b0c6127875182fca3d5dae
-
SHA1
0a6d59deb4151a8a8e3f74e9118149f900964e74
-
SHA256
27dcf9852c0ce5f009d95f01dfe56051bd8d79c3dc3a5b8dad047b973dcd2c03
-
SHA512
2f9ae27af54d47cd95dae56d3d35f585e6a96d0ef46b85e4fc287d6265cf417e4aaaca8e80e1a9f2ce9bcf68766139803b9a18551a21e5d22f75f3433bf96058
-
SSDEEP
1536:nzrWH4Vv1GTQReuqjeL+FmqnnsStXdq8JFYMtO53q52IrFH:vWHGv1nRNGn9qgFttg3qv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27dcf9852c0ce5f009d95f01dfe56051bd8d79c3dc3a5b8dad047b973dcd2c03
Files
-
27dcf9852c0ce5f009d95f01dfe56051bd8d79c3dc3a5b8dad047b973dcd2c03.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfcd Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ