Static task
static1
Behavioral task
behavioral1
Sample
41d1846ed2ebc45ac961445c166402fa.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
41d1846ed2ebc45ac961445c166402fa.exe
Resource
win10v2004-20231222-en
General
-
Target
41d1846ed2ebc45ac961445c166402fa
-
Size
5.0MB
-
MD5
41d1846ed2ebc45ac961445c166402fa
-
SHA1
393ef3ccb7d2825d9a5ee1f9933f3a1b97f9ddea
-
SHA256
6bd38cb8f331e862eb568de7dfde2d713378df67eb6a810e7a3345f9a969f273
-
SHA512
c6f40c7ada46542911c3e4e5666118c8f21b1ae0801f4d1af385870acb2c65549dafd09f4d82ac620735439bc5581223d8dc27882a4fd1cd4a591153217fa0aa
-
SSDEEP
24576:p0rFhMU/FbQmbm+eLN/Q3o8R71N6JWcx2A5s:uA+KBJIPR71NUf5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41d1846ed2ebc45ac961445c166402fa
Files
-
41d1846ed2ebc45ac961445c166402fa.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 764KB - Virtual size: 764KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4.2MB - Virtual size: 4.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ