Behavioral task
behavioral1
Sample
27fd5fb32d3adda9a3188abe7a691e5bf4546cb648e262fad0ff35a077b3b9cb.exe
Resource
win7-20240903-en
General
-
Target
27fd5fb32d3adda9a3188abe7a691e5bf4546cb648e262fad0ff35a077b3b9cb
-
Size
108KB
-
MD5
c8c6fa496b03946301c40624e4741536
-
SHA1
f8db674e7fc44de093978bd333bcdbae9582ffb4
-
SHA256
27fd5fb32d3adda9a3188abe7a691e5bf4546cb648e262fad0ff35a077b3b9cb
-
SHA512
68c9fa7a59e22e5d445099e4da187c4a7aa5a1cb98afc9c50642fb3a55bc76e41a67d00ab50debac538c0d26929cef8929a8311170b3f33b70465c92ee903bd6
-
SSDEEP
3072:chOmTsF93UYfwC6GIout5pi8rY9AABa1xPOwQjF:ccm4FmowdHoS5ddWyWwQjF
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27fd5fb32d3adda9a3188abe7a691e5bf4546cb648e262fad0ff35a077b3b9cb
Files
-
27fd5fb32d3adda9a3188abe7a691e5bf4546cb648e262fad0ff35a077b3b9cb.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE