Behavioral task
behavioral1
Sample
27d6da38b0ecb6945d9f5b45d89bbbc0.exe
Resource
win7-20231215-en
General
-
Target
27d6da38b0ecb6945d9f5b45d89bbbc0
-
Size
431KB
-
MD5
27d6da38b0ecb6945d9f5b45d89bbbc0
-
SHA1
e5a9cacc9790ccb2ff9ed854ef9c66744b321541
-
SHA256
f134f84ff5e7335537ca8821fc99331e967d56366d0441d50b1d84397e888345
-
SHA512
9b35b00b7339658056c1833d77b95df07b29c0e12ce52064f6b2b2c450ab49737740f49adb0518be1f279c1719c86b7a17a4b76107db61b515f84a290574b838
-
SSDEEP
6144:SUUOAFlvsHCD7fxcQs/IUkoaDqB5hrpZ8yAKPOuKP+KX0qwhB5B+eVlt:uOAFlkHCDtcjzF3AKPKXpwh9
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27d6da38b0ecb6945d9f5b45d89bbbc0
Files
-
27d6da38b0ecb6945d9f5b45d89bbbc0.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 268KB - Virtual size: 268KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 153KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE