Behavioral task
behavioral1
Sample
41053db4063379ce8d8f3e2f1e4065db.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
41053db4063379ce8d8f3e2f1e4065db.exe
Resource
win10v2004-20231215-en
General
-
Target
41053db4063379ce8d8f3e2f1e4065db
-
Size
207KB
-
MD5
41053db4063379ce8d8f3e2f1e4065db
-
SHA1
37b3519bbdd1497d5b05c2544293dfbf6b178b02
-
SHA256
799ea6009b1c1a129ec363df236158b2acdb37e7114c79dde52e6ec5a7bdd674
-
SHA512
cf5c350c3db5d8560ae44f98eb6f1680e65f0f29340b616c021304022c5b95b83b5e71c777938276bf51e3fc35e97fc30f98660bf9cff0473d5b009946aca04e
-
SSDEEP
3072:jQK8QhZdzNI1qmNQ8hLOCaCy1RFc91d6Z5K+I2YKYXXkPQXpRGKeiehNIcrZ:jQXEPhcDhSCaCy8r+Ivf5peieB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41053db4063379ce8d8f3e2f1e4065db
Files
-
41053db4063379ce8d8f3e2f1e4065db.exe windows:10 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 134KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE