Behavioral task
behavioral1
Sample
41053e8c00b088b71ad2492a712ed6b5.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
41053e8c00b088b71ad2492a712ed6b5.exe
Resource
win10v2004-20231222-en
General
-
Target
41053e8c00b088b71ad2492a712ed6b5
-
Size
1.3MB
-
MD5
41053e8c00b088b71ad2492a712ed6b5
-
SHA1
294db0d2ebc9abc21f497bc667d4032bbf8dd78a
-
SHA256
90d5805dabc46d53864a0aa673f0da6192c4455e8955538b1884355f2cc090e0
-
SHA512
8fa3e9df890982a99a5d32153de122bc4059022cb9c12c8bf7bdb352c65c89750f661630ecced0663f1e89ac2931bb3668d8f81b05210d1f825ec78b5e721fb4
-
SSDEEP
24576:vzz5oyLj0VOFYlOXsa+2CIUGnpwauziSYNukaWKgfPXYsXqFOT+vG:v5zFYza1LKPWJRangfPIl
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41053e8c00b088b71ad2492a712ed6b5
Files
-
41053e8c00b088b71ad2492a712ed6b5.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE