Behavioral task
behavioral1
Sample
bc78656d957a82552e035b1404015600.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bc78656d957a82552e035b1404015600.exe
Resource
win10v2004-20231215-en
General
-
Target
bc78656d957a82552e035b1404015600
-
Size
42KB
-
MD5
bc78656d957a82552e035b1404015600
-
SHA1
fcd022e025d998c14b613a79710294eb712bf9cb
-
SHA256
ca8a4f9abc63ce4b37c36f5e4626eb23cc1678b278ac1feee251b0fe95cfbdfe
-
SHA512
5393a5db5a9db2a467499bf24ef8d5ac02fa62f210e90403923b768e2c85bf85ad679a110156d06bd10fae896ca12950870488c68d5634a20d6d307530be1880
-
SSDEEP
384:VEH7iu6AU9/svShgFXI1uOqTcHbKdtEZR50fqJG0VV9zKQ/orqRR:e7IA+ugqOKdtETKCJnL9zKQc6
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bc78656d957a82552e035b1404015600
Files
-
bc78656d957a82552e035b1404015600.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE