Behavioral task
behavioral1
Sample
Hachi.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
Hachi.exe
Resource
win10v2004-20231215-en
General
-
Target
Hachi.exe
-
Size
23KB
-
MD5
5e040824d125d4713300fbba29d56f9f
-
SHA1
f5031b609b1cf721af36d7fe126ced2a88b428af
-
SHA256
fe3b1e33c5407ef124053d86837c81eb617eae12d3e7d2bd779abf0bbe51d11f
-
SHA512
6036b48061c684257ac25f39ffe15ec8afd67e01147a3008b120918a367539733203ff378f818cbd0664b6f9f47f2feddbaf5bb20dad0b2a0b753c8d069496ca
-
SSDEEP
384:4jQkZbV8i+fIZFQyZpz0q7bYKkxRjK36ct14yvXbB75zx+96UX2baNJawcudoD7x:nGcAPQIpz0Mb18Kdt14yvLhlxrf+nbcv
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Hachi.exe
Files
-
Hachi.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE