Static task
static1
Behavioral task
behavioral1
Sample
41866c4170cd77580e875c7365f6793c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
41866c4170cd77580e875c7365f6793c.exe
Resource
win10v2004-20231215-en
General
-
Target
41866c4170cd77580e875c7365f6793c
-
Size
250KB
-
MD5
41866c4170cd77580e875c7365f6793c
-
SHA1
c3d18cbc064bf436b52a84fb101e1fdd8ed7ab29
-
SHA256
e10aa21b9c36d65a60ea9de1898a77ae40b37e4956d33472b4165f93fa69047a
-
SHA512
b9ca9333a5e12132c499059777bde5c18d06ee01c26a6ef8bdfad20d74689096c753ec67f0961a74de10d4bbfcac9d62e1d8232e0bfabdb4df9c3f319aa5cdac
-
SSDEEP
6144:9xRy5EPEahzwf0gYR5z7eLr4CU0/DN479Y69ZJaIdf2cBE:9xRQf0gipkr4C/Z4pY+aIdf2cBE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41866c4170cd77580e875c7365f6793c
Files
-
41866c4170cd77580e875c7365f6793c.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.ro Size: 246KB - Virtual size: 246KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.gl Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.ywb Size: 512B - Virtual size: 8KB