Behavioral task
behavioral1
Sample
678ed670847dac4ae98f071766e0e23f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
678ed670847dac4ae98f071766e0e23f.exe
Resource
win10v2004-20231215-en
General
-
Target
678ed670847dac4ae98f071766e0e23f
-
Size
2.6MB
-
MD5
678ed670847dac4ae98f071766e0e23f
-
SHA1
c68da9bc9323b5b4d9ab501d38edc30eb1e6b537
-
SHA256
dfea2db776094385c666e5416080ceca942dd4bda7a7127e892e93b3747955fe
-
SHA512
0e8a07f880c4d42460ea88f8694b22e77778dd8b66082cda86052e669fc413ea4f413741b79d4c30acd0609d7c597c9140ada43ff5f63888b2bc3b91e19c8429
-
SSDEEP
49152:Dy2vwFWsrbQz/exaQrsx3B638n0Z8qIs9Vhbr0D9ISt38eO/ay3:DyIwRrbQoSt8IWVhbOI2/o3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 678ed670847dac4ae98f071766e0e23f
Files
-
678ed670847dac4ae98f071766e0e23f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE