Behavioral task
behavioral1
Sample
b78975494396b25e565014c80a737c62.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b78975494396b25e565014c80a737c62.exe
Resource
win10v2004-20240226-en
General
-
Target
b78975494396b25e565014c80a737c62
-
Size
302KB
-
MD5
b78975494396b25e565014c80a737c62
-
SHA1
f478f3cf6e197ee49016f66f8bdeaddc9e4530ea
-
SHA256
904b186b3b194f188b0d9c356e6cdf8cc4c48cd0de21d832a5690584fd2bf541
-
SHA512
49bb19ca873f4cb240f2dea2edef5f267dad52227e5e4e8d75c5c14781d40f3a3419485c0dad53bba0349ab9a56aaa6472e3625d63fc6ca5fb2211664c8b7dc9
-
SSDEEP
3072:D+gk3hwEYwTbBgeBdMTUKqsfBvd3+s63I1vZxawv6kr9Zy5Dh8PYYu4oGWkvIRKn:izSEt3OfBvd3+1EhQkr9IDhUJ9CmQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b78975494396b25e565014c80a737c62
Files
-
b78975494396b25e565014c80a737c62.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 588KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE