Static task
static1
Behavioral task
behavioral1
Sample
41b5334358d09e6cc28eaa603acb7d3f.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
41b5334358d09e6cc28eaa603acb7d3f.exe
Resource
win10v2004-20231222-en
General
-
Target
41b5334358d09e6cc28eaa603acb7d3f
-
Size
87KB
-
MD5
41b5334358d09e6cc28eaa603acb7d3f
-
SHA1
fc552fb574d4419b071b87f5780fc5372e2a932b
-
SHA256
d7df41515b0000eadbf4041d9b3f833dce32ef1c77a534c67ffc230111469df7
-
SHA512
76fc9113d686aa5aa818f3641a7924b1631abc68ca04e6ace64bc137d17e5503389310dffe30067f7f3d16f950875830b1552d1decb767faab3941e0ba677415
-
SSDEEP
1536:3J8HXUMHlH6+9HmnukILDTSFqdyTBhbEwcApqCyFrOK2qSOgpY3SxrmO+jz:3J8Ja+9H3TSFqGrbEwcAplZq8Y3Sxrp+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41b5334358d09e6cc28eaa603acb7d3f
Files
-
41b5334358d09e6cc28eaa603acb7d3f.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 83KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 512B - Virtual size: 180B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 66KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ