Behavioral task
behavioral1
Sample
c27d7f1368efa0fb75f1bf0697c42ad2.exe
Resource
win7-20240903-en
General
-
Target
ef9b5a46bd1823b59b7f266a957caea83962a469630c8f425bfeead90c7925f8
-
Size
54KB
-
MD5
94950170e2a3c10340d5c12c3406fd10
-
SHA1
54770baebcb2ae00889e788e0ad48f8625417c4d
-
SHA256
ef9b5a46bd1823b59b7f266a957caea83962a469630c8f425bfeead90c7925f8
-
SHA512
d7886aefe49989bac0c06a37a892d33ee50bd47a9dfbdb91bc04c5fd0754f7c15fc46bd6dedea7415099b9ad7363708f88c93cbe464289bc717bcb94852df476
-
SSDEEP
1536:ZEfBGS+Z9oHrB+Gn9e6tfuJ6osQbQqXyOj95YcvH+eCT:OJGZ+H1Pe6ZuQoZbr6f7
Malware Config
Signatures
-
resource yara_rule static1/unpack001/c27d7f1368efa0fb75f1bf0697c42ad2 upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/c27d7f1368efa0fb75f1bf0697c42ad2
Files
-
ef9b5a46bd1823b59b7f266a957caea83962a469630c8f425bfeead90c7925f8.zip
-
c27d7f1368efa0fb75f1bf0697c42ad2.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 54KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE