Behavioral task
behavioral1
Sample
27a642134e2d69c1182f78c9951d33139581a9ed95c8e33ef2cef67d0c0514c4N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
27a642134e2d69c1182f78c9951d33139581a9ed95c8e33ef2cef67d0c0514c4N.exe
Resource
win10v2004-20240802-en
General
-
Target
27a642134e2d69c1182f78c9951d33139581a9ed95c8e33ef2cef67d0c0514c4N
-
Size
684KB
-
MD5
bdec5cf7918eadb1da3d9007b459dd90
-
SHA1
8b549d5a1f03b1d6b27b4fb2f35a679e9ec7ad0c
-
SHA256
27a642134e2d69c1182f78c9951d33139581a9ed95c8e33ef2cef67d0c0514c4
-
SHA512
6b40e2468e6f032d647bb918053356e61daa4e782185e8b61d4fe9e8fe5137dbc70a7b167096624ff2c60b96ed3a1a8e6f4a499d8d444975c713c03155268912
-
SSDEEP
12288:VQt5H6YP4Jbh3tspELFhHS36FLXL652/jlkeOJ:VI5H6h9HHSKFLXL6sOJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27a642134e2d69c1182f78c9951d33139581a9ed95c8e33ef2cef67d0c0514c4N
Files
-
27a642134e2d69c1182f78c9951d33139581a9ed95c8e33ef2cef67d0c0514c4N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE