Static task
static1
Behavioral task
behavioral1
Sample
78667919a7bec8bb422ef5725aa6a476.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
78667919a7bec8bb422ef5725aa6a476.exe
Resource
win10v2004-20231222-en
General
-
Target
78667919a7bec8bb422ef5725aa6a476
-
Size
13KB
-
MD5
78667919a7bec8bb422ef5725aa6a476
-
SHA1
f32965ce0b7ea1409a21c62c58451479e50db20b
-
SHA256
5fc4cb098d8b8f270337859765f0e8afb505f4ef0feacfee3232c886e1584e50
-
SHA512
a156510029c63c367460b9d7533449ebe4a618b517b7cad266b4f6314af179c88d58b7820c0f903d10075bf764f13dccda005bbc2d0607309d3fdb67e8d4e7de
-
SSDEEP
192:Y4TUsNf1oct41fHJg/i8gplm8iMRCBse7ZwVITQFLDP0PxWLw6WS:LLNB4x+/ori4Cie7ZwOTQJDamXX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 78667919a7bec8bb422ef5725aa6a476
Files
-
78667919a7bec8bb422ef5725aa6a476.exe windows:4 windows x86 arch:x86
5956d710a9aca8a8bb88faec16ed2f9e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
LoadLibraryA
VirtualProtect
Sections
Size: 512B - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE