Static task
static1
Behavioral task
behavioral1
Sample
41374233bde5b39de411d32efbb52c33.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
41374233bde5b39de411d32efbb52c33.exe
Resource
win10v2004-20231215-en
General
-
Target
41374233bde5b39de411d32efbb52c33
-
Size
42KB
-
MD5
41374233bde5b39de411d32efbb52c33
-
SHA1
15e647f80513b7721f5fafe48c3c9a997a1c290c
-
SHA256
39bf99e4f929a9f0f8cfe88a0ea507cc38b4c72e482f80308aaa87c943f3b866
-
SHA512
c4d8172516476ce56ddbfb3423930f9464704803853251c93756b970034c25a9def100a4440ba0213647d1d5f03c946f4d9437894318cf588bf1cf21fac08d8c
-
SSDEEP
768:YNF6HcgqGLwRFEjfyQYqS34Cp6moa2Opj1Z8uW8YZP0:Yb6H+SoqjfVYqSCPOpZZLW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41374233bde5b39de411d32efbb52c33
Files
-
41374233bde5b39de411d32efbb52c33.exe windows:4 windows x86 arch:x86
9534fcd0f693009c88102eb0630b67fe
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
urlmon
HlinkNavigateString
Sections
CODE Size: 34KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE