Behavioral task
behavioral1
Sample
41019392d1001e20a7327aafc1d4d41c.exe
Resource
win7-20231129-en
General
-
Target
41019392d1001e20a7327aafc1d4d41c
-
Size
784KB
-
MD5
41019392d1001e20a7327aafc1d4d41c
-
SHA1
479509f12fdaa38f044ccb7d93a6f6b7456c952a
-
SHA256
540a6491aa4118801de6aecb33656c002d1c8319294b5821d1b5979683751de0
-
SHA512
538dcf57dec8a2f59e1bd56cd6a72ff98c9fddb92bd62796551870232dfdd5e4bcb368e112da3745847bbe9d68ec6594ca1ea13dbff9c28a542b891b26abffb1
-
SSDEEP
12288:NRz62hbfhgxQeOi4ZCaWMpU+t8KIrPdrbiJm8vd1bRSLzL4JmBOna8NtbgrCRNJw:NRz6eZZCaRpU68VFrbiNd8zL4sCRFF
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41019392d1001e20a7327aafc1d4d41c
Files
-
41019392d1001e20a7327aafc1d4d41c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE