Behavioral task
behavioral1
Sample
41df2f426abceceeabdfa431df9d6178.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
41df2f426abceceeabdfa431df9d6178.exe
Resource
win10v2004-20231215-en
General
-
Target
41df2f426abceceeabdfa431df9d6178
-
Size
350KB
-
MD5
41df2f426abceceeabdfa431df9d6178
-
SHA1
2508937e0a65a8561e528ea7716321d0b50e13e4
-
SHA256
6158e74fd13da2fc0d9aede12fcc7e4a25b0c7687f57de7342003a6fc0b83db0
-
SHA512
a8f982fa8b94f470512c3ecef1c055993ef55833cc29b14ec10673e2a46579ed4d126aab1b37dec79ad4e8a07388804ac278e079d396c024c33a2069fcdc46df
-
SSDEEP
6144:BZtnzEHFEIIM+YI0Twa7B0XI4RPo6VF+r+vT8e2OlfbrI8r7edzcSTzuL+amlAAd:BZiHVIMW0TwWB0Y6Poik+AiZrKdzcWaK
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41df2f426abceceeabdfa431df9d6178
Files
-
41df2f426abceceeabdfa431df9d6178.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 852KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 354KB - Virtual size: 356KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE