Behavioral task
behavioral1
Sample
27d68a88d4dddf6a051b28e91e60c931.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
27d68a88d4dddf6a051b28e91e60c931.exe
Resource
win10v2004-20231222-en
General
-
Target
27d68a88d4dddf6a051b28e91e60c931
-
Size
56KB
-
MD5
27d68a88d4dddf6a051b28e91e60c931
-
SHA1
9f7e04e39db4afa931baab558f14a6c72a495c30
-
SHA256
f3a5dd12b6f5835dd56b2d15e9cf973b57e8dd3ca78599c615bc20a86a659673
-
SHA512
f38ad04d516611d2b91d017b36d12765a4dc0487d38100438fbf01afd4387a7cd51f82c42e6854ab1c093fb7dcd92fbd34736074066901aa7a2a319f1396c460
-
SSDEEP
768:tGR5iJWve3oT7KXf1Rf5efcZDU8x1ve3/zWAADw2t2NEV7D+Za7IPJx745LJ/IoG:ty50Wvgf1zZHjm3KtFxg4/tYfNn3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27d68a88d4dddf6a051b28e91e60c931
Files
-
27d68a88d4dddf6a051b28e91e60c931.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 168KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 55KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE