Static task
static1
Behavioral task
behavioral1
Sample
78ea6f1225d1f454b95d25b0f81386d2.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
78ea6f1225d1f454b95d25b0f81386d2.exe
Resource
win10v2004-20231215-en
General
-
Target
78ea6f1225d1f454b95d25b0f81386d2
-
Size
25KB
-
MD5
78ea6f1225d1f454b95d25b0f81386d2
-
SHA1
6e7f0242824b8cc6a6688a83a367d1bb4f0380ae
-
SHA256
fc9a0902292801e40a015c0976d8cd6714c7d92c6b10e9a4de655d0520a42c73
-
SHA512
4cdb2a7dc24c5d73b9cb65118c20615500c1e1f5962c008f181d9a096352524e54989cd755b3d6721f35d63f5f2dd2c237e7bbf473040475220d6aaddcf5993f
-
SSDEEP
384:/7Pofh9nVTVBIcDqS4JT2i1qfkwypAcfZ7mf/LD9r/QghVc1cfPwndo:jQfXVJBBDqS4Jj1YkwyOg7IL2BC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 78ea6f1225d1f454b95d25b0f81386d2
Files
-
78ea6f1225d1f454b95d25b0f81386d2.exe windows:4 windows x86 arch:x86
b8111320f794d9e62a7ffe5d84bed59a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualFree
VirtualAlloc
Sections
hmimys Size: - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hmimys Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hmimys Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE