Behavioral task
behavioral1
Sample
a1727978fe42e58803fa5d049e441dee.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
a1727978fe42e58803fa5d049e441dee.exe
Resource
win10v2004-20231215-en
General
-
Target
a1727978fe42e58803fa5d049e441dee
-
Size
4.7MB
-
MD5
a1727978fe42e58803fa5d049e441dee
-
SHA1
96860bbf5675cd22e4398b0e12e6a59c260c8efa
-
SHA256
267584e99dcba6577789d0501d6651aaa83fb71f5a3e0c9b66bd97eb4439a2e0
-
SHA512
ffb2c86112f7bdd0899198547858198a10502c41eac809793eefad1467fbf8cab946e7852cee19685e2cadb64da499c37f7dc666abe62b6240445b92c6eef70e
-
SSDEEP
98304:QHHpHJi6xHcFYHJi6xHPAkHHJi6xHcFYHJi6xH:uLTSaTmkJTSaT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a1727978fe42e58803fa5d049e441dee
Files
-
a1727978fe42e58803fa5d049e441dee.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 588KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE