Behavioral task
behavioral1
Sample
78dacc0d3b4460fa5294d4a2d298b8cf.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
78dacc0d3b4460fa5294d4a2d298b8cf.exe
Resource
win10v2004-20231215-en
General
-
Target
78dacc0d3b4460fa5294d4a2d298b8cf
-
Size
1.5MB
-
MD5
78dacc0d3b4460fa5294d4a2d298b8cf
-
SHA1
ec4cafb51717e95c81995ff7567f074d24195675
-
SHA256
42e09e81f34871ad51b4470a7a8395cd5d320b3bafe728cb69f8e12b100e27f6
-
SHA512
e370c52f40dfff964b8b2aabf485ca8fadce8ab2116031b892724ab7edd629431caabedae465bb1e2b17ae50764854f3eb35b746466622756d2d64c473aa2fd2
-
SSDEEP
24576:T5E7lPQlbpBnxOyM6TG/Hh42EqwZD99gbt4hT77Vkj7GLIlorOW:slPMxxRi/yrTp9ki7BE7P
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 78dacc0d3b4460fa5294d4a2d298b8cf
Files
-
78dacc0d3b4460fa5294d4a2d298b8cf.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE