Behavioral task
behavioral1
Sample
27d00828f3fe85984e18c51db1200f80N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
27d00828f3fe85984e18c51db1200f80N.exe
Resource
win10v2004-20240802-en
General
-
Target
27d00828f3fe85984e18c51db1200f80N.exe
-
Size
189KB
-
MD5
27d00828f3fe85984e18c51db1200f80
-
SHA1
0eccd7ab06eea81f23f58882161cfc93840f7793
-
SHA256
5f7350593a0e6841225185c6face8a61eebdac29332a6f128da5486eb582784c
-
SHA512
08db3011e9697d35c29db8b61e040445897ab97d5d43392a5a3be1f9c212fc69bfcc24dd3794bd2bfeb6da6e46ffb699dbc7194d5b857a41ce744617cbf2f61f
-
SSDEEP
3072:fny1tE5KIKzf+qcPZkxjRbMl2k7ueySZl/L52hRDdfYh6qtz7wqLTfzv/0:KbEqf+NZkxB82k7uRST/2RDdAh5lRLLI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27d00828f3fe85984e18c51db1200f80N.exe
Files
-
27d00828f3fe85984e18c51db1200f80N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE