Behavioral task
behavioral1
Sample
41bfa25d91f62850a54eea9b30ca8e55a3adc441d9404dd701788e1cc1bed256.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
41bfa25d91f62850a54eea9b30ca8e55a3adc441d9404dd701788e1cc1bed256.exe
Resource
win10v2004-20231023-en
General
-
Target
41bfa25d91f62850a54eea9b30ca8e55a3adc441d9404dd701788e1cc1bed256
-
Size
1.9MB
-
MD5
fdb0fc91350dbc4a0ab7b55570fb8a91
-
SHA1
910bb9c00ed20ed4e82805d7f52459baf44c4050
-
SHA256
41bfa25d91f62850a54eea9b30ca8e55a3adc441d9404dd701788e1cc1bed256
-
SHA512
ebcf573cdaee97904c3e16735719983beb23dedb6a5f953794097b07b852d263a6f50bb50080ab6eddcf5a66cc33e8389116906405b43105e93db32c75bdb09c
-
SSDEEP
49152:tXZP0U7GC4AHnq3O1Yd2+9oUwBkM4tpJZ1acgJzzPUsEpg:dZb7GGqeyE5g7b3pkPUDg
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41bfa25d91f62850a54eea9b30ca8e55a3adc441d9404dd701788e1cc1bed256
Files
-
41bfa25d91f62850a54eea9b30ca8e55a3adc441d9404dd701788e1cc1bed256.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 55KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE