Behavioral task
behavioral1
Sample
78f16a6ddfe987d1f9067307ac85634698f1f4475635ff6ddaa285deae522af9.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
78f16a6ddfe987d1f9067307ac85634698f1f4475635ff6ddaa285deae522af9.exe
Resource
win10v2004-20240802-en
General
-
Target
78f16a6ddfe987d1f9067307ac85634698f1f4475635ff6ddaa285deae522af9
-
Size
94KB
-
MD5
3f0ca1a4df141fac240c4ee02dbf2ae3
-
SHA1
cc6451cf9a26224fdcbf655f9ac80af3efaef525
-
SHA256
78f16a6ddfe987d1f9067307ac85634698f1f4475635ff6ddaa285deae522af9
-
SHA512
0e5ab832fa729339c098a909e758e8d635316b79f86c53b32812a53ee7ed01233cd90517ebba84e594a37ad57795bfa894ba17ff9808a376162a76434322b1fe
-
SSDEEP
1536:V7Zf/FAxTWoJJZENTNyQYXCQCXTW7JJZENTNyQYXCQCbRI7C5C7C5e:fny1tEmtEw
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 78f16a6ddfe987d1f9067307ac85634698f1f4475635ff6ddaa285deae522af9
Files
-
78f16a6ddfe987d1f9067307ac85634698f1f4475635ff6ddaa285deae522af9.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE