Static task
static1
Behavioral task
behavioral1
Sample
da41e863b371645a97c6061821fd9b1d.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
da41e863b371645a97c6061821fd9b1d.exe
Resource
win10v2004-20231215-en
General
-
Target
da41e863b371645a97c6061821fd9b1d
-
Size
88KB
-
MD5
da41e863b371645a97c6061821fd9b1d
-
SHA1
96d04f8cfdd7bd05e40275a06954ddc5bd962909
-
SHA256
a7b61d70a4090c191db157e15eab16f448a605d39e0da47b905cb877bcfc1e52
-
SHA512
9def7dcad040bde562965805c0ce3d56635a0db709b44e08d4a4bea9573a8d2089ccdeb974899aeaf5101a0e8054b4c331a468cf3a3eaef09d1efb4c9913097a
-
SSDEEP
1536:fnw7Qqz+SucoSmdQaFGGWpo3n9NMKxC0WkXEHNip/:fUQeucIFOpo3k7wEHcp/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource da41e863b371645a97c6061821fd9b1d
Files
-
da41e863b371645a97c6061821fd9b1d.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 116KB - Virtual size: 115KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 514KB - Virtual size: 39.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ