Behavioral task
behavioral1
Sample
b41ba9cac66b8dba372ee3182bac608b.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b41ba9cac66b8dba372ee3182bac608b.exe
Resource
win10v2004-20240226-en
General
-
Target
b41ba9cac66b8dba372ee3182bac608b
-
Size
227KB
-
MD5
b41ba9cac66b8dba372ee3182bac608b
-
SHA1
5c45187622a546c69b4d7c80596660505d0e38ba
-
SHA256
5ae74f829de6bdaf568ae1fcf0c9a28f7ca1ae94ecfe9c663f13f6aa6326bffc
-
SHA512
2ca965f4569158de9ca61a855f5ed7662a57dca239dfaf65703305950f8356d5e4e6a355f258d95fa606456da48a2d6acd68dd6f8240154ce6dc4d7036a71254
-
SSDEEP
3072:sr3KcWmjRrzSLBrFtge2tKTeGxtJxBOFtfwU842w4X1HlSbka/2sGm4UqeAKvvfN:/xh2t4eGxtItoU12LzAk3sG9q6G8LBu
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b41ba9cac66b8dba372ee3182bac608b
Files
-
b41ba9cac66b8dba372ee3182bac608b.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE