Behavioral task
behavioral1
Sample
01e27f276c505e57b03e3291cd0750d4.exe
Resource
win7-20231129-en
General
-
Target
01e27f276c505e57b03e3291cd0750d4
-
Size
1.5MB
-
MD5
01e27f276c505e57b03e3291cd0750d4
-
SHA1
8aa85a50a2b82ff064d4b573b67917ae6ee7fd24
-
SHA256
a772d4a2315a0d9e7956501d3046b75733c8b79d65888fb46f29ffdbb6412f4d
-
SHA512
9b0ceb4bfad319ebf15e8b86a7c9070345e5d1fcad64d9ccc52a01b0f6d700bf8bcf15c1587e5ae6cbe353eccfd8634b11f55ce1094652a46a086a57e1c57889
-
SSDEEP
49152:8BXcyi8ZFNk8vuZa/yz4+jGcStlMMq9XWRQIiSu:8uyiMQ8ektloEu
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 01e27f276c505e57b03e3291cd0750d4
Files
-
01e27f276c505e57b03e3291cd0750d4.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE