Static task
static1
Behavioral task
behavioral1
Sample
41dcae30c095f07da864a6a90b8f81b6.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
41dcae30c095f07da864a6a90b8f81b6.exe
Resource
win10v2004-20231215-en
General
-
Target
41dcae30c095f07da864a6a90b8f81b6
-
Size
59KB
-
MD5
41dcae30c095f07da864a6a90b8f81b6
-
SHA1
6d4e5d2c27a866924bc5ac0277c3ed802b5c903d
-
SHA256
eb02317512627d342622fd77e38b02740dcf7fef35f7cd3a16cd1f87421603ba
-
SHA512
b32b7c7c8ce5bd4d73a367b366f9df6e31d8972ce9582e58e6883d5cfe1e11a1aa576ea7b27d2ebacf4ce8e5d706460bb16740fd62ca06c8b8c393c62342b7dc
-
SSDEEP
768:AsaW4S0rmN5XGNXnRzgjHxih9ZjLKr3++BE+sSHThNSmcyZe9fEnF:AezXGtLDWih+sSHThNrcAnF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41dcae30c095f07da864a6a90b8f81b6
Files
-
41dcae30c095f07da864a6a90b8f81b6.exe windows:23611 windows x86 arch:x86
7a7803027531302026dedc7b5f6025f2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
Sections
iriqjrqj Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
ybarijja Size: 54KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qyqiaqjj Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rrzqyjaa Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ