Behavioral task
behavioral1
Sample
b41774724fd347e6b0c3ea1b05e7d306.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b41774724fd347e6b0c3ea1b05e7d306.exe
Resource
win10v2004-20240226-en
General
-
Target
b41774724fd347e6b0c3ea1b05e7d306
-
Size
399KB
-
MD5
b41774724fd347e6b0c3ea1b05e7d306
-
SHA1
0610fb60ba48cca2ca880e264737ebdfd7260675
-
SHA256
079f56c34e828e0a7a026bfaad355b265e6d052eb2d82f38a4fa06d5098a5d84
-
SHA512
ee616254f97e413e7628b0400f57501c445fc8ac001e7ab0f7ef564d05130e806bfc6e1cefc9a8764d381e70ecb379de4aab6d6a1f97d1e6bc83aa6ec87f2a53
-
SSDEEP
6144:hGLxjWdj7O+v7JkFLQanhQUPlA6cezBdaXkEYew5z5s0JFx6WDk0ooE3DaqBRT:hEs/v7Q0aOAl5cezTa99Gdo0kNbbbT
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b41774724fd347e6b0c3ea1b05e7d306
Files
-
b41774724fd347e6b0c3ea1b05e7d306.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE