Behavioral task
behavioral1
Sample
41491543c82bc205df32e55eaffb1530N.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
41491543c82bc205df32e55eaffb1530N.exe
Resource
win10v2004-20240704-en
General
-
Target
41491543c82bc205df32e55eaffb1530N.exe
-
Size
961KB
-
MD5
41491543c82bc205df32e55eaffb1530
-
SHA1
2832c7cdf80ed8d266ca0f4fca8dff8e578defe6
-
SHA256
59c05f5e973e92470b4dbfcb32463a84f1e4456f31db751c9faad1853f13bcf2
-
SHA512
dbf0be5fb4bb3ff2b77ad6b21e5b85e3682094afa23c153034b72b85c9a3771daf9d7eb10914309a2dec5effb444f69e3f9a481341a02f4d625336c06bb2c1e2
-
SSDEEP
24576:EP9B4Xv6zwEAxx0jW4opdxm/mW1X0Vdfx0s2w2ufM:EP9e5moEX0W
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41491543c82bc205df32e55eaffb1530N.exe
Files
-
41491543c82bc205df32e55eaffb1530N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE