Static task
static1
Behavioral task
behavioral1
Sample
41003db2bb1da290627d7ffe886ccd7a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
41003db2bb1da290627d7ffe886ccd7a.exe
Resource
win10v2004-20231215-en
General
-
Target
41003db2bb1da290627d7ffe886ccd7a
-
Size
1024B
-
MD5
41003db2bb1da290627d7ffe886ccd7a
-
SHA1
64062ab45a29bc2cc620f8b60659a0795bf6639d
-
SHA256
e336aeb2d54d1d4426d6b3db12ae6e854b99208e2450d9180ce72eba7678b83a
-
SHA512
214f5349e044c0c66d4fc5292ff77de6d89eb5649ba27f6edac5410bb0ca85b8577124c3bf9e0cc125d0d5b0cc9310e5178262468201b8ffb5b0afadc91af7d7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41003db2bb1da290627d7ffe886ccd7a
Files
-
41003db2bb1da290627d7ffe886ccd7a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
8qiuq0 Size: - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
8qiuq1 Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
8qiuq2 Size: 371B - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE