Behavioral task
behavioral1
Sample
41a0682b904b17de601e21c8d274093c.exe
Resource
win7-20231215-en
General
-
Target
41a0682b904b17de601e21c8d274093c
-
Size
568KB
-
MD5
41a0682b904b17de601e21c8d274093c
-
SHA1
d52131c528beac107578f50cd7412f763d8d9528
-
SHA256
27cbb504cfd23c20384147bec4fb31919759312a59e28642da562383a1cf54b2
-
SHA512
6857e41bbadd92314ed34567cd3042833931eca30d2f9721edb6d0bcd9a0d69d635352a9a6501ddb539d7f0532da10e9e655e426c7b5d408ca91abe601e5f715
-
SSDEEP
12288:WQqpj4mbA5jYcUJWM/zQZzmuRUsi6A4FcxgPmhhpeqfqqbqquqqd1:Sp0yAVXZgzqzRG6AiEgYhpeuqiqvqM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41a0682b904b17de601e21c8d274093c
Files
-
41a0682b904b17de601e21c8d274093c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 388KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 407KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 159KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE