Behavioral task
behavioral1
Sample
b78ef56b1745632e64c9cfe251fcd6bdd28b55204fb643639da15ae969f5c061.exe
Resource
win7-20240704-en
General
-
Target
b78ef56b1745632e64c9cfe251fcd6bdd28b55204fb643639da15ae969f5c061
-
Size
37KB
-
MD5
713f46ae182f0af6acf852b65c463cd9
-
SHA1
8d61bcdb5284952f464ebe95665f21231c6e5e96
-
SHA256
b78ef56b1745632e64c9cfe251fcd6bdd28b55204fb643639da15ae969f5c061
-
SHA512
1552f37381eef601a4fcd15c202888a36f60bfd0a51480b5ce78473611963b10756e25929aa519ff29d7ef1dc5b79277d5ad3e6a9a26396e2be14fe33a63940b
-
SSDEEP
192:asA6psQyFaNJhLkwcud2DH9VwGfctyI5EY9o3bC3bh3bu3bL3bG3bn3bra3bz3bi:ZpEaNJawcudoD7Uj5EYpmESuQNIF5h
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b78ef56b1745632e64c9cfe251fcd6bdd28b55204fb643639da15ae969f5c061
Files
-
b78ef56b1745632e64c9cfe251fcd6bdd28b55204fb643639da15ae969f5c061.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE