Behavioral task
behavioral1
Sample
a41f0365e841933320357ec6a13b9377.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a41f0365e841933320357ec6a13b9377.exe
Resource
win10v2004-20240221-en
General
-
Target
a41f0365e841933320357ec6a13b9377
-
Size
142KB
-
MD5
a41f0365e841933320357ec6a13b9377
-
SHA1
22b8200c1dd1465d8604a80e7221aaa31dced63b
-
SHA256
4fa39841430a16013a5f8a2c1108cf093628222cb6eb0df0fedd31848c8cb93f
-
SHA512
183340979c2e3930e414c4d321cc7bb2295cb3f67026976e3c0bc721ca6fcabf7ca528dec3b17ece0d3d2aed42910e5c6c85873c6f9ea98f19eaf34799e218e8
-
SSDEEP
3072:FdNmn0ISZNOiuGsudwl4Yha+LwQoQ+x73ejaAVkuXYJnnL:DNmOQiTde4Yw+DoQuOHXYJn
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a41f0365e841933320357ec6a13b9377
Files
-
a41f0365e841933320357ec6a13b9377.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 80KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 49KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�W1CA� Size: 91KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE