Behavioral task
behavioral1
Sample
41019ca1e466740ba7c1e9dada20f4d0.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
41019ca1e466740ba7c1e9dada20f4d0.exe
Resource
win10v2004-20231215-en
General
-
Target
41019ca1e466740ba7c1e9dada20f4d0
-
Size
342KB
-
MD5
41019ca1e466740ba7c1e9dada20f4d0
-
SHA1
b292e28ff00995141a7e9b3833c80b64be797821
-
SHA256
55d3e9eb032547d97036e0f17f07dd0427ff0a530cef1b17763d5c0abe46d3f8
-
SHA512
f5f748cb7ff43d39f6f8dc9e4063a25a81c3b08e01d48369db0246d4bac05adf6c7d9f0881ea9a694c74e95af90e87e2253e23838032304df859cc99786f9dca
-
SSDEEP
6144:8Rqmpp+amNOGokzLyM9tsLAitQo6tzOKkzIt8gKyfjxfR9D2j4y171O:YqmpplpGoGL3etQoMiXM8gxf/Sj4yJ1O
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41019ca1e466740ba7c1e9dada20f4d0
Files
-
41019ca1e466740ba7c1e9dada20f4d0.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 338KB - Virtual size: 340KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE