Behavioral task
behavioral1
Sample
27d840f28ffbbffffe53b49365fadfa2.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
27d840f28ffbbffffe53b49365fadfa2.exe
Resource
win10v2004-20231215-en
General
-
Target
27d840f28ffbbffffe53b49365fadfa2
-
Size
1.3MB
-
MD5
27d840f28ffbbffffe53b49365fadfa2
-
SHA1
144c4579f5d909a96d0286fdbb036bfa483042de
-
SHA256
4d1545f3506016928c4de50c984f99003bb7ffe3b34a04fd123711ce87cffce5
-
SHA512
6e9a3de0d44598bc351c0c923df64a9fc9abf89658fe41ee9744e509523a7fab5f402287c7862bea6be815427b0865d811e210bc6f00166a784d7f62305853d7
-
SSDEEP
24576:Z95ooKw0UYoVJ5jbUVlAUGwNbwPWnuCXnw8I6TvvtBJ+d9pu80roJvKeSWta3t4v:/WoKw0UYiJ5jbo5GqbwPWnuCXnbRTHtW
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27d840f28ffbbffffe53b49365fadfa2
Files
-
27d840f28ffbbffffe53b49365fadfa2.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE