Behavioral task
behavioral1
Sample
78a1d34f976ae74c8174812998a95e1c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
78a1d34f976ae74c8174812998a95e1c.exe
Resource
win10v2004-20231215-en
General
-
Target
78a1d34f976ae74c8174812998a95e1c
-
Size
2.9MB
-
MD5
78a1d34f976ae74c8174812998a95e1c
-
SHA1
604d07caa211f7f9394622e2255f2319578afea5
-
SHA256
9f4bf02c588243ee69751ca2b35e3bc27050b257985851c9ee4910169a531f67
-
SHA512
90d805d6780bc23434e92b5e1c5bbbe13fe792399d539b60d31d4c767e8d92031dd6e6b7c0068bcfc5c532a240c460a8a7c15427e46b402c9875b5a815204454
-
SSDEEP
49152:1CXrJgGU8aYJsq9dWW3wUDghBLDc4ZpatGIKWsapLNbqzOCP8QyfzpP+STMufDPv:Y7U/YJtp3wUE3Y4X0GIKIpLNOSCPzqTr
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 78a1d34f976ae74c8174812998a95e1c
Files
-
78a1d34f976ae74c8174812998a95e1c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE