Behavioral task
behavioral1
Sample
27ef5f44a2ca3f1e49085be8ec5abc61.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
27ef5f44a2ca3f1e49085be8ec5abc61.exe
Resource
win10v2004-20231215-en
General
-
Target
27ef5f44a2ca3f1e49085be8ec5abc61
-
Size
2.0MB
-
MD5
27ef5f44a2ca3f1e49085be8ec5abc61
-
SHA1
424138d04c1c04e26291f1afcff92cf253fec148
-
SHA256
53d4ca80e5bc2517e14aee2beefb409e07fe68b6e312d103024fd03f4d381846
-
SHA512
abeee9007fc39a69becfa85af24bb675c0e804b16d32f3aee5323258c2910ff0339551a80a822e4847c81e40e01bf4964949a8d00ef56bb52c3cf2c834f28912
-
SSDEEP
49152:78LRAZugVa9T4/rgo3hLIUgHcCdVG88qBmXqa1upEWsvoY4/rgo3hLIUgHcCdVGB:gLOZu0mErg0IJH/d0FamXrupEHvoFrgm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27ef5f44a2ca3f1e49085be8ec5abc61
Files
-
27ef5f44a2ca3f1e49085be8ec5abc61.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE