Static task
static1
Behavioral task
behavioral1
Sample
41a7a64e83048e4ddeaf2f4af9735740.exe
Resource
win7-20231201-en
Behavioral task
behavioral2
Sample
41a7a64e83048e4ddeaf2f4af9735740.exe
Resource
win10v2004-20231215-en
General
-
Target
41a7a64e83048e4ddeaf2f4af9735740
-
Size
28KB
-
MD5
41a7a64e83048e4ddeaf2f4af9735740
-
SHA1
eced586c451144a3f91d3aba3a9466a2dae28c5a
-
SHA256
b3ccae725ca5f6f7a0ad093f2a40596ba811fbd1880319428940321493151fc5
-
SHA512
a86ac12bd2ea5578959453cdfbc31cbf2a08b8919709f9ed8fc39888455568daba72e9344e9e3e05ddefe4ad82d67de41b3b01aded29faa1728fbd4ba55c99e2
-
SSDEEP
384:SQ6rb8Je98RIBIirqWaN3UP1u3AvCt5rJKwx0xDXunKG+SbR/8:ShaIBI2am83q4OPxDX8P+Cm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41a7a64e83048e4ddeaf2f4af9735740
Files
-
41a7a64e83048e4ddeaf2f4af9735740.exe windows:4 windows x86 arch:x86
d8830768e26d5542e5a19dad95d6bbc7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
ExitProcess
user32
FindWindowA
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 200B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE