Behavioral task
behavioral1
Sample
1a41b8a63e5e42bd745b2ae169dbff48.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1a41b8a63e5e42bd745b2ae169dbff48.exe
Resource
win10v2004-20231215-en
General
-
Target
1a41b8a63e5e42bd745b2ae169dbff48
-
Size
5.1MB
-
MD5
1a41b8a63e5e42bd745b2ae169dbff48
-
SHA1
75c6bffbdfb2e2f563a09e3b1939ccbecc303cc8
-
SHA256
dd6c468434ce1fea4ff3e5ecf51e7818934e127a681f2d86c6a22958667b809a
-
SHA512
76096951e228f5f7d5d2d51cec0d888390017a84042c84486a31766f366983a87575ef75c8d490a3ddd9ceeec1ca4fd7b6e21c099e5a91fb1704a8d06e6b1cb5
-
SSDEEP
98304:uQE4d3PqNuIA4Iev/Xb324iPKEe0Dvz00kpzIQ3:dzd3P02HeHXEiEJPfkp
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1a41b8a63e5e42bd745b2ae169dbff48
Files
-
1a41b8a63e5e42bd745b2ae169dbff48.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE