Static task
static1
Behavioral task
behavioral1
Sample
41a588ab3cc926e837f65f84de60ef5a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
41a588ab3cc926e837f65f84de60ef5a.exe
Resource
win10v2004-20231215-en
General
-
Target
41a588ab3cc926e837f65f84de60ef5a
-
Size
63KB
-
MD5
41a588ab3cc926e837f65f84de60ef5a
-
SHA1
f48eeaaf9fbaa16e58e11e5d2a8d21c2ba378e29
-
SHA256
b9f2aeb8b8751e07d13b564ea43d639f896235699716c0181d47f41552d6dfd6
-
SHA512
9436aa528324ea520bf9726ce45e530e5b685a0fdefca3540c847e43f548cc9f8d5e1c3eada0f18c2a077092cdad25c420437b2397667b18dfa4febf5b79e9f7
-
SSDEEP
1536:sUfiw+85C2be+NoYUFrWU3vQLJ1QU0NqlVII:R6w+UCejNoYUFrWUAJ1QrqfII
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41a588ab3cc926e837f65f84de60ef5a
Files
-
41a588ab3cc926e837f65f84de60ef5a.exe windows:4 windows x86 arch:x86
d7c3c9382b43e5478a56ea7d42452cdb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap
user32
MessageBoxA
Sections
.text Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE