Behavioral task
behavioral1
Sample
27c8400c2bfff2d59d16aa1130472ed9.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
27c8400c2bfff2d59d16aa1130472ed9.exe
Resource
win10v2004-20231222-en
General
-
Target
27c8400c2bfff2d59d16aa1130472ed9
-
Size
2.6MB
-
MD5
27c8400c2bfff2d59d16aa1130472ed9
-
SHA1
5e8b7f75bd66b7f832b2b27e8d17c8b21afa47ba
-
SHA256
bb61a957c69c3f8e7d439f49aff31caecaadc743497a04fbf6bff82d51836b97
-
SHA512
19fb27f7fbb71f1a4c409c3ddf85b4ae881729da46531bd5e8601f2348045053cdff234196cb8b4cfc66f28932f7ce77f1cbbf33a0de7b2dfaf829ebb63b7247
-
SSDEEP
49152:HP9n7Bg50hCE96FB5C4PBBKVG//WSnU6fKh7phiFDay3:Hh7aehL+iA/e1bhqF73
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27c8400c2bfff2d59d16aa1130472ed9
Files
-
27c8400c2bfff2d59d16aa1130472ed9.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE