Behavioral task
behavioral1
Sample
541ce4feb866ab2b2460ecb760783de4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
541ce4feb866ab2b2460ecb760783de4.exe
Resource
win10v2004-20231222-en
General
-
Target
541ce4feb866ab2b2460ecb760783de4
-
Size
2.1MB
-
MD5
541ce4feb866ab2b2460ecb760783de4
-
SHA1
fb38de2fe9685803d20d96203ba3731a7af88e5f
-
SHA256
05316e366d21523c98cd5ca93d538b8af6297e5b03a8497ff5810cf165d36c6e
-
SHA512
774795d8b1dfa266a3c2e407938e037c6136f08737e425ba41531b2d863a6061fa733c6e892479b4238212bcc420fe93e4519af907416e56fbc7fc70a343bae2
-
SSDEEP
49152:kp7M/SzhyhZ+njgVwnD3lH1THNHltpgZu7To/PjsQ/Lfsb:kp7tz4+ThHyM7To/PoqL0b
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 541ce4feb866ab2b2460ecb760783de4
Files
-
541ce4feb866ab2b2460ecb760783de4.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 6.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE