Static task
static1
Behavioral task
behavioral1
Sample
41c0c19a2105df4d92750cb5e108e889.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
41c0c19a2105df4d92750cb5e108e889.exe
Resource
win10v2004-20231215-en
General
-
Target
41c0c19a2105df4d92750cb5e108e889
-
Size
64KB
-
MD5
41c0c19a2105df4d92750cb5e108e889
-
SHA1
b0037724ef3cd9b39ff29e771f9b680fe6273bb1
-
SHA256
883ecabe15f7b1eaf06661c9bd98567f9e1c4ba6c1104861e7915ff3f0464ceb
-
SHA512
735be80191d32e42fb497a5b0c450d87d4205c8758703e832e9c1b8bc057e9385082c21d170893ed0306e38f6f5fd72a145e6af8027a16740f37a1c3508a0c53
-
SSDEEP
768:BEWVDf6LhWz3j006chAcJFHRsBUvsqkUuFHT2D+I5rnMJe9HJo/OCh/ra/:GWd1T/6NcJFK6vsnLFHTWMJUsOCFa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41c0c19a2105df4d92750cb5e108e889
Files
-
41c0c19a2105df4d92750cb5e108e889.exe windows:4 windows x86 arch:x86
ac8cbe093f954e4628921cc937e68585
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapUnlock
GlobalUnWire
SetEndOfFile
HeapAlloc
ReadFileScatter
RtlZeroMemory
ReadConsoleInputExA
lstrlenA
SetTapeParameters
GetSystemTime
DebugBreak
DefineDosDeviceA
ContinueDebugEvent
GetCommandLineA
ExitProcess
GetStartupInfoA
Sections
icode Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
idata Size: - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
idata Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
idata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ