Static task
static1
Behavioral task
behavioral1
Sample
878b13c78e9b9979d10a595607abb81d.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
878b13c78e9b9979d10a595607abb81d.exe
Resource
win10v2004-20231215-en
General
-
Target
878b13c78e9b9979d10a595607abb81d
-
Size
92KB
-
MD5
878b13c78e9b9979d10a595607abb81d
-
SHA1
74016c75c1d3a4941da424ef0f7392cddb8dafcb
-
SHA256
a36d186394f17ea079774e9c68e6f82cc2e085b07a812bf199eb216f33a10b4a
-
SHA512
dc25ec32e037661d4584569c62d47c075cf070dafb1517b8db283544615151959d0c0576bb6e3a6fbc6aae3aa8e54a54846959819a0781bc6fb32dd44e0e6269
-
SSDEEP
1536:q8gq19mALQuncIlLwK7D2fuFE7iaaSkN8iwX2JNEhDaMP3fT7gkhiQoWR:qj3e2Il8K7CWFVyiy4NEhFP3JR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 878b13c78e9b9979d10a595607abb81d
Files
-
878b13c78e9b9979d10a595607abb81d.exe windows:4 windows x86 arch:x86
68140a9a4b28871f88884585977b9263
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentDirectoryA
CompareStringA
GetProcAddress
LoadLibraryA
GetTickCount
user32
DispatchMessageA
TranslateMessage
GetMessageA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 87KB - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ