Behavioral task
behavioral1
Sample
41fec8ebfdc712b4a8fa1a497e6b6869.exe
Resource
win7-20231215-en
General
-
Target
41fec8ebfdc712b4a8fa1a497e6b6869.bin
-
Size
784KB
-
MD5
41fec8ebfdc712b4a8fa1a497e6b6869
-
SHA1
b1b8bace8f1974bed422e02bb8ecfdc1556621aa
-
SHA256
60ea2854633d4dcc84128fb9312b6b2117144682fd97b59c187d6b2bf7b5b126
-
SHA512
6d2ad7f6b75011a0d41d6f53457f68273a396f42e1c14a265acec2adaa8bcaa0bec0c9d1f4f24e2eedd7a3c3dfc6b382a500cd29e89a13695963f0cc8d5e20ea
-
SSDEEP
24576:q9/KzkgEAExc3283THBdsGBHs99/W+wJt:q9SggEAExcxBZ3+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41fec8ebfdc712b4a8fa1a497e6b6869.bin
Files
-
41fec8ebfdc712b4a8fa1a497e6b6869.bin.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE