Behavioral task
behavioral1
Sample
27223b175e8aa825f5c3e5b51d3bea66.exe
Resource
win7-20240508-en
General
-
Target
27223b175e8aa825f5c3e5b51d3bea66.bin
-
Size
195KB
-
MD5
27223b175e8aa825f5c3e5b51d3bea66
-
SHA1
688443a5bda28352df3c3780249459434dce67b4
-
SHA256
7372eaa793792bf0517bf55eea739525f57131db8d5c64677fd181214ac41919
-
SHA512
ecef56c0582f103bea42ef2c36b421661b46aea757fd20e690a72bd9597263fc06ca0b5decf10804505dbc2e3a35a819b0a0f8384dbf9938f96b75bbaad03e7b
-
SSDEEP
3072:PIIcrOuUYYYYmVgoZfZu2YeG9Kc2G6GxJMwL45BJIquTWA:PIFK6Vgo1Zu2YeG9Z2BGL3e9
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27223b175e8aa825f5c3e5b51d3bea66.bin
Files
-
27223b175e8aa825f5c3e5b51d3bea66.bin.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 72KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE