Behavioral task
behavioral1
Sample
0378cf52848e8fb60c5fb5953003ecec.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0378cf52848e8fb60c5fb5953003ecec.exe
Resource
win10v2004-20231215-en
General
-
Target
0378cf52848e8fb60c5fb5953003ecec
-
Size
575KB
-
MD5
0378cf52848e8fb60c5fb5953003ecec
-
SHA1
3b3bdba4394a9d76dcacea9b82d50357202eebbe
-
SHA256
e1bead39d0393eec20e7f72c63807a0efc9c7608c6e75174b3d0a4fb64fb4edb
-
SHA512
315e7150e3e22ec330433fc8fe2dd582e1b7bf497ce1836af80f9ffcb2875543e1fe71b76bd0f3511d8df3e689a1951d1416ee7ef628c2bb2d3c67b7434844e0
-
SSDEEP
12288:+ZUuLe5/JtvB1Y3DVlTHk1d8uzjvVLGmm8W:+ZDLe5hpByHumufvVqb8W
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0378cf52848e8fb60c5fb5953003ecec
Files
-
0378cf52848e8fb60c5fb5953003ecec.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 505KB - Virtual size: 508KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE