Static task
static1
Behavioral task
behavioral1
Sample
f41f2cd8fb35e68b6bb3979faac1ba2c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
f41f2cd8fb35e68b6bb3979faac1ba2c.exe
Resource
win10v2004-20231222-en
General
-
Target
f41f2cd8fb35e68b6bb3979faac1ba2c
-
Size
1.6MB
-
MD5
f41f2cd8fb35e68b6bb3979faac1ba2c
-
SHA1
9fac0afac41417b05f1e70483376a0f12511c24e
-
SHA256
f1c0a04b5ef07f142cd10ea79ac6966f4efbe30e8ccea30ab176ac1e2e8bcc9c
-
SHA512
994dae230f055e01ee563440d344c00c8e328c07e56526bc6183ba4cc3dfe561149878951fe94571509e0d9bdb125dd4cd288b1300d12ce57dd81a2923eb7b02
-
SSDEEP
12288:WAwSfxL/2Dc3jDLLmt0LDQewsAjR0j0bidyzNJbT7SLAXIR8R19:raewsAjiQfIAXIR8RL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f41f2cd8fb35e68b6bb3979faac1ba2c
Files
-
f41f2cd8fb35e68b6bb3979faac1ba2c.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 892B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.c2r Size: 512B - Virtual size: 220B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 164KB - Virtual size: 163KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 332B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ