Behavioral task
behavioral1
Sample
78dea0c24e1a213698a5305abe19c545.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
78dea0c24e1a213698a5305abe19c545.exe
Resource
win10v2004-20231215-en
General
-
Target
78dea0c24e1a213698a5305abe19c545
-
Size
3.9MB
-
MD5
78dea0c24e1a213698a5305abe19c545
-
SHA1
640627b5b5b102e5b24fcd222651fcd7570d0bc2
-
SHA256
ea8159396e903a7c9911c815d5a028b8e81df36885d1d539ce6e0429f1acc28e
-
SHA512
9cb385a86ef960cc7dd3b2f25aeb7b8d41a4a559aab8dfb0df3e0844334f5eb7d8d44095effaab240b4214d644a20e7676e09847d7f7ea8b37c514556fcb2b0e
-
SSDEEP
98304:XrSkLnkhSvogA8h70tHQk5POmoYTaoSvogA8h70tjr7qXVrSvogA8h70tHQk5POs:XzvvA8yR9PmBvA8yFH1vA8yR9PmBvA8y
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 78dea0c24e1a213698a5305abe19c545
Files
-
78dea0c24e1a213698a5305abe19c545.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE