Static task
static1
Behavioral task
behavioral1
Sample
41be304984117f87e0832bea0fac700f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
41be304984117f87e0832bea0fac700f.exe
Resource
win10v2004-20231201-en
General
-
Target
41be304984117f87e0832bea0fac700f
-
Size
71KB
-
MD5
41be304984117f87e0832bea0fac700f
-
SHA1
bf97245437b7628322d608587016ae2ce833a665
-
SHA256
09a80b83bc64bd40a633fc03466777d77eeafbc230ea78c39e4b5ec0f220e80a
-
SHA512
34b5902d0239d36259ab7725aee102493993f339101dffe911bef8243c8b0d645354acf53ebb49e05c29e296c7db01cdef6302840857dd274b04dad8d60120b3
-
SSDEEP
768:EsJhM/47dTkc8jmiG/7H1SE3KGdA6jVS2bnKHtIGA8/nVNEcoX7zPjqEiQv4wz:EAA4R43e/7VOEjs2FRP2EJv4s
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41be304984117f87e0832bea0fac700f
Files
-
41be304984117f87e0832bea0fac700f.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ