Behavioral task
behavioral1
Sample
27e61cd1f945b7b78d8eae54128be51b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
27e61cd1f945b7b78d8eae54128be51b.exe
Resource
win10v2004-20231215-en
General
-
Target
27e61cd1f945b7b78d8eae54128be51b
-
Size
847KB
-
MD5
27e61cd1f945b7b78d8eae54128be51b
-
SHA1
7d05d1d6105fa16d5ea59520377c1687ac2ae23b
-
SHA256
4a2760e5ce89740a4ca93328f9b39fafa905fc8d9b360d5a8c4691744270c17d
-
SHA512
891828ef729a62973da40697e9b5bcf787fa464e0d85eaf5190369e41684a5c8252c064779fdf76fbd9dd6807c0f59f74abaa241fa6090e8449cd4d98778e34e
-
SSDEEP
6144:3COa3pqVQg4SVHFSZeaExq16V2ThqiHKnLrHl2OIPqVQK6u5P/FwSFmeYWcT1DD6:3KrqPT0PxwebA
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27e61cd1f945b7b78d8eae54128be51b
Files
-
27e61cd1f945b7b78d8eae54128be51b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 576KB - Virtual size: 576KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 268KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE