Static task
static1
Behavioral task
behavioral1
Sample
41b9145efc0630a2a424835a547b3bc8.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
41b9145efc0630a2a424835a547b3bc8.exe
Resource
win10v2004-20231215-en
General
-
Target
41b9145efc0630a2a424835a547b3bc8
-
Size
27KB
-
MD5
41b9145efc0630a2a424835a547b3bc8
-
SHA1
823067c47ba0b309745318100c5afda1e3cdb181
-
SHA256
cfe3403312b69ef2a489f62b429d0bad89aafd004a087bf4a7dcf72af470056d
-
SHA512
323f855a82afcb612962e39ceaa12f7148167b5f7160b0e7630c0115a9f0c93bb9e2d1c87bc641e17ff547741f171b5622f9143dd40e91fa69d88c08797c7fe7
-
SSDEEP
384:LFEvbnEjftEH03zbTEFa1GFHq06E7KzyvnT9VjIykJDozkWvf2owS8/Nn6:LFBFE03zsY1GxKz+alozke2ow3/8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41b9145efc0630a2a424835a547b3bc8
Files
-
41b9145efc0630a2a424835a547b3bc8.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 236B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 744B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 29B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 880B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ