Behavioral task
behavioral1
Sample
41fdcfabf5618ac19e480aaf1b4eb78b57c032c1aab94179e2f43844f064b121.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
41fdcfabf5618ac19e480aaf1b4eb78b57c032c1aab94179e2f43844f064b121.exe
Resource
win10v2004-20240508-en
General
-
Target
41fdcfabf5618ac19e480aaf1b4eb78b57c032c1aab94179e2f43844f064b121.exe
-
Size
1.0MB
-
MD5
6171b04e1c0c76eb01ac914699fcddf0
-
SHA1
191d506db3ae3de17275e4dd40a738ff62262f5c
-
SHA256
41fdcfabf5618ac19e480aaf1b4eb78b57c032c1aab94179e2f43844f064b121
-
SHA512
01aad345da7e2e697c86a7a82bb02520e405ec9f487dfb5443ea586629d7fefdb74c1b996e9c4109bb26aeaf14328ae727af5f072fe5a3b67cfb766b2e07ff25
-
SSDEEP
24576:lfQSXUwPBRcsZ4dZBe894A1R9ypbnemBI58WFuLT9j:tXUwPnczd3G+8dneN58Wu9j
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41fdcfabf5618ac19e480aaf1b4eb78b57c032c1aab94179e2f43844f064b121.exe
Files
-
41fdcfabf5618ac19e480aaf1b4eb78b57c032c1aab94179e2f43844f064b121.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
8xGaDB Size: 388KB - Virtual size: 224KB