Behavioral task
behavioral1
Sample
41b1238a2d28b60d6cd8bd4789edc448.exe
Resource
win7-20231215-en
General
-
Target
41b1238a2d28b60d6cd8bd4789edc448
-
Size
2.3MB
-
MD5
41b1238a2d28b60d6cd8bd4789edc448
-
SHA1
9d985c3a9fadb97dcab2045749eb81625723a206
-
SHA256
af69ccf56e69454ffa40e517d02098e2d51f8e67f3d3103f4b98655f2c1a77a9
-
SHA512
3a6b8b3dd58579fe8c6249b034471bb01738bd99c17aaaa19bf411e00ff79fc7f92b993dcf3338f254ba4db0b9fb798110fd6ca69147810f3af0fd88faac0534
-
SSDEEP
49152:Nxeg4/SOyAK/LyfRfD6OevQoJOqBjBTWo9UQNgVT:i+tAK2p2O+hBRtUUgVT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41b1238a2d28b60d6cd8bd4789edc448
Files
-
41b1238a2d28b60d6cd8bd4789edc448.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE