Behavioral task
behavioral1
Sample
441bf3ae2e538efe7cc070a693f095df.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
441bf3ae2e538efe7cc070a693f095df.exe
Resource
win10v2004-20231215-en
General
-
Target
441bf3ae2e538efe7cc070a693f095df
-
Size
310KB
-
MD5
441bf3ae2e538efe7cc070a693f095df
-
SHA1
ef826c781468b91978b509197886c5a07914e793
-
SHA256
6059b2bf16ee8d617093fe4a2a830f8521956b015b8a6a9e2b70151bcd5651b4
-
SHA512
2448895e1b16ff1f8b4e582a3ac1e46b96afa7972ffd0d3e72161a62119eb7eb1a79cf6a33e9aca58c2d0f97d33b9f315d966dfce6fcb8c2d80a52c12bd2f2cc
-
SSDEEP
6144:KPP4ZXgdQWOG2kMZriA5qCnEBG9tqLjCqraIH8/oSxmrcG/l2F:KX4ZwdqGCi1CnnuLjCqWIc/oSx4U
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 441bf3ae2e538efe7cc070a693f095df
Files
-
441bf3ae2e538efe7cc070a693f095df.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 448KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 233KB - Virtual size: 236KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE