Behavioral task
behavioral1
Sample
41ec2cee1770658a5f7d52ef1d5705a18fe1bffd27832694c2a92c4c42f9b2e9.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
41ec2cee1770658a5f7d52ef1d5705a18fe1bffd27832694c2a92c4c42f9b2e9.exe
Resource
win10v2004-20230703-en
General
-
Target
41ec2cee1770658a5f7d52ef1d5705a18fe1bffd27832694c2a92c4c42f9b2e9
-
Size
394KB
-
MD5
8e20fbdc0ce6cbf27fcc7d3ae77b455f
-
SHA1
1e1009abe3adc82d6e6070a7e6d4bcddd33a02f3
-
SHA256
41ec2cee1770658a5f7d52ef1d5705a18fe1bffd27832694c2a92c4c42f9b2e9
-
SHA512
550b0b8f05e383f9eb2da0de3f51961af25a36646d33cdbbb51e974602410d3172547d1bdb86b60ee276485537e8bcc88f9b16898c2a6bfad774b4dffccbb91e
-
SSDEEP
12288:K3cC2wY2ZSoX+3yRx4wStrRTEnI4mWOoSH:acC2w1rO4x4wShWI4LC
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41ec2cee1770658a5f7d52ef1d5705a18fe1bffd27832694c2a92c4c42f9b2e9
Files
-
41ec2cee1770658a5f7d52ef1d5705a18fe1bffd27832694c2a92c4c42f9b2e9.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 952KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 355KB - Virtual size: 356KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE