Behavioral task
behavioral1
Sample
41124047be932cb92e65911f86b362e0.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
41124047be932cb92e65911f86b362e0.exe
Resource
win10v2004-20231215-en
General
-
Target
41124047be932cb92e65911f86b362e0
-
Size
594KB
-
MD5
41124047be932cb92e65911f86b362e0
-
SHA1
ed05c5b94b6e6d21e77834983a3578b192aa0c65
-
SHA256
23c4e0effb767fa2e0e88eb80e4372534994fc5bf56a1d365a63a1c7d385eda1
-
SHA512
849b04a2c412871bf363ef193c5ff5e6fb0cddfdb572393eb97ccd4e413c06faeaa2a02ba6628a74f27647c8947e6c9a7e80276a5613c04f379e695f05e85f4b
-
SSDEEP
12288:/Q3cLXLg2mkdI8zsKij5H1qHJSUCpRqtb6qzIHP3234K4cRa:/QsLXnCqs5j5H1qlAR4BmmN4cRa
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41124047be932cb92e65911f86b362e0
Files
-
41124047be932cb92e65911f86b362e0.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE