Behavioral task
behavioral1
Sample
78ba8199583ed45bd94fb85420092566.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
78ba8199583ed45bd94fb85420092566.exe
Resource
win10v2004-20231222-en
General
-
Target
78ba8199583ed45bd94fb85420092566
-
Size
133KB
-
MD5
78ba8199583ed45bd94fb85420092566
-
SHA1
c958216e160b70437b39df66f223edd7a0baa265
-
SHA256
4461c86ce707fdc41b0f6b5bfa0956c44429e5688fc0022d7e36f4a7eda6dadd
-
SHA512
1ef1dff84dad81f294c000ca83336d19186ccdbc521e6f639df9d5f92d184dadb0172f0bbf5cd212fc0b6a2e007c3de34abcc27e92b540157330fd42ad2932cb
-
SSDEEP
1536:GA0hoVOnuTCymB3lfs/8N1QFArvho4rvegBhgkOeYV7qRAOc+tZ32VkYz2vLgMpC:8buA6szBhxOE3+GLgMIftW+PS7Gg+gQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 78ba8199583ed45bd94fb85420092566
Files
-
78ba8199583ed45bd94fb85420092566.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE