Behavioral task
behavioral1
Sample
278b85295115a1f6c21e070ea8e9598c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
278b85295115a1f6c21e070ea8e9598c.exe
Resource
win10v2004-20231215-en
General
-
Target
278b85295115a1f6c21e070ea8e9598c
-
Size
206KB
-
MD5
278b85295115a1f6c21e070ea8e9598c
-
SHA1
d7e88b3419088cfc7a1bb6800eb95731b5cc72c8
-
SHA256
e0e48f043ff9fa0e8814f4a8d86821e665820412f60f695421dd8a86a6f2d0b5
-
SHA512
225ebeee3c704a1ae77e266778971786d98e668ab06cafb043341fec1301612e0167ddc7f3c433f037438f78835d15d246b50a7dcf9fddaefcadbaf840a56c99
-
SSDEEP
3072:rqyYL2Pt7u4PEi4PYcb82ZLddJJh3HO6uR+GSllPQYDBy4cTImVGkVK8P9Y/wema:rqyVZzPqJdHxuTSllP5cQmVPPMwemDiR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 278b85295115a1f6c21e070ea8e9598c
Files
-
278b85295115a1f6c21e070ea8e9598c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 568KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 272KB - Virtual size: 276KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 145KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE