Static task
static1
Behavioral task
behavioral1
Sample
41504f3bcc58fc7c30000d8a227bf689.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
41504f3bcc58fc7c30000d8a227bf689.exe
Resource
win10v2004-20231222-en
General
-
Target
41504f3bcc58fc7c30000d8a227bf689
-
Size
313KB
-
MD5
41504f3bcc58fc7c30000d8a227bf689
-
SHA1
ee6f95627bc55820157f134caa52679c313c146d
-
SHA256
06d79cc06fef2570373b074dea768fa33dc77cb6858d56e9c51e06e35f601792
-
SHA512
e47fdcbef82d2e20430c2ef9e2256fae0cbeb6357e13148fd57834fb55d1b4c1ee4106c07282405f9b7f0dd2390d47047def197f71e5f2d95b60d5eab981b942
-
SSDEEP
6144:P8nqbA+BmZZ94Q5YZ1VFYFOgvi7NqRH8E0/Hhhy:P8nqUG275orFYEgviclN0vhhy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41504f3bcc58fc7c30000d8a227bf689
Files
-
41504f3bcc58fc7c30000d8a227bf689.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 96KB - Virtual size: 93KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.zwt Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE