Behavioral task
behavioral1
Sample
978778f41983ef6288cb09f560c74c73.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
978778f41983ef6288cb09f560c74c73.exe
Resource
win10v2004-20231222-en
General
-
Target
978778f41983ef6288cb09f560c74c73
-
Size
3.9MB
-
MD5
978778f41983ef6288cb09f560c74c73
-
SHA1
115acffcce1e3fe03ea76feb783f78222e7033bc
-
SHA256
6ef561d6398c2ce5df86d2c071a9edf9440ff2baff82457f397af0ddc06b694e
-
SHA512
e714e94d0824f74e1696f0d83e26cdb308b3dd4900e2a09fbd48de7415f04f61558db7df0d9d9360a2ac72d3d06bd2523818ac7508188f179627c25fd1f33345
-
SSDEEP
98304:jQmxQ9Ar68DLAklcakcibiqhMbMgOn7n0bcakcibiqh7hlGV7xUNLncakcibiqhd:jQm2WlXAkldlirybMgOnkdlirfIU1dlQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 978778f41983ef6288cb09f560c74c73
Files
-
978778f41983ef6288cb09f560c74c73.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE