Behavioral task
behavioral1
Sample
41e72668dafacdec1746ed7497cfe36e.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
41e72668dafacdec1746ed7497cfe36e.exe
Resource
win10v2004-20231222-en
General
-
Target
41e72668dafacdec1746ed7497cfe36e
-
Size
1.3MB
-
MD5
41e72668dafacdec1746ed7497cfe36e
-
SHA1
5a8eed48d5b857712be9df7ed1971e928c704258
-
SHA256
62d77d1722200e5bb3660f6d958639d70d29d431c55c35e9dd305b9eee58b561
-
SHA512
0c650b9e9d1610618657fff5b2ef71ed20400b334fc468564ff71dd0be77226d68d4f9447d74d89248d3e156835f55da32392ec1ab68cdabb4c7737800a06dd0
-
SSDEEP
24576:ciVbg07WX9wxcL0xZxOyZfMRj26KMs3KoUw1dpmC/h9t1wU9/9Us:7VEf9acQ5jZ2S6KMsDU6fn/h93R9j
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41e72668dafacdec1746ed7497cfe36e
Files
-
41e72668dafacdec1746ed7497cfe36e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 141KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE