Static task
static1
Behavioral task
behavioral1
Sample
41cf73524d3b7f306c17b7512738d716.exe
Resource
win7-20231201-en
Behavioral task
behavioral2
Sample
41cf73524d3b7f306c17b7512738d716.exe
Resource
win10v2004-20231215-en
General
-
Target
41cf73524d3b7f306c17b7512738d716
-
Size
8.0MB
-
MD5
41cf73524d3b7f306c17b7512738d716
-
SHA1
146810d727b9df2f67ab4ff5c8c84ecf2a55cca3
-
SHA256
231913968580b7e7752e1e6fff37682612254b41bc0c9d206df2b4c04627ff04
-
SHA512
bb90531a594c81c27f4bd1fef5fe2c159310e3a796ea26e1768d3473ce99645f5cd004e623987b3503463a054139600e3247ffda16c3ea7bbebf29d3a2c7e19a
-
SSDEEP
196608:FAEn9TAn9Tln9Txn9TBfU1n9Tin9Tin9Tin9Tin9Tx:tWXvzmAcccD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41cf73524d3b7f306c17b7512738d716
Files
-
41cf73524d3b7f306c17b7512738d716.exe windows:1 windows x86 arch:x86
500ff1538958cc73738bf0c262a1773f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
GetModuleHandleA
user32
MessageBoxA
Sections
.dafixer Size: 541KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dafixer Size: 10KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dafixer Size: - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dafixer Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dafixer Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dafixer Size: 512B - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 122KB - Virtual size: 560KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dafixer Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE