Behavioral task
behavioral1
Sample
41f336405b8f9a47ceb6cf03ced38645.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
41f336405b8f9a47ceb6cf03ced38645.exe
Resource
win10v2004-20231215-en
General
-
Target
41f336405b8f9a47ceb6cf03ced38645.bin
-
Size
20KB
-
MD5
41f336405b8f9a47ceb6cf03ced38645
-
SHA1
6434041bacccb258e83df21d327b41a9bf03050f
-
SHA256
3f150f3ae2d1d3a655ab0ed4480cbab5244248306327382519803b40dc9b03d1
-
SHA512
5f12c705c0a61b9edcf49472e5b6741b4f6f90ac9d582f9c9316cf8a548fcaf6b2603bc3d51b773f5be147f3af43d55c16e3cf376653373a3a68c8af8cc9b067
-
SSDEEP
384:XvQ9McFqg5j0S/onRqoQFy5OopYmGhvwe/T3Y+0jX:XvQGw9vAnooVgoYvw03xI
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41f336405b8f9a47ceb6cf03ced38645.bin
Files
-
41f336405b8f9a47ceb6cf03ced38645.bin.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 212KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE