Behavioral task
behavioral1
Sample
b78ca27a35171498b3a32768b7d08169.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b78ca27a35171498b3a32768b7d08169.exe
Resource
win10v2004-20240226-en
General
-
Target
b78ca27a35171498b3a32768b7d08169
-
Size
266KB
-
MD5
b78ca27a35171498b3a32768b7d08169
-
SHA1
2da93adfaabe04c49a04570d096347d7b7bde542
-
SHA256
42a9fd745eb50583b913c6281ead07a9c1b9a2df4cb292d1f4aa72aa1a401b49
-
SHA512
9edc2a7dcece0a73425eac75689d5e15191df9a660769a1907a95d911539d80e4b2be428e2936237bea74f87a23f4071a4f9b6de89093a8b1f347cfec95cb0c4
-
SSDEEP
6144:ZaiOv8GyD1N9VX8i+OXWomW6d84/WmXDaZFMaGQ:ZaiOv8FD9VMijXWvW6d84uiaZFMs
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b78ca27a35171498b3a32768b7d08169
Files
-
b78ca27a35171498b3a32768b7d08169.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE