Static task
static1
Behavioral task
behavioral1
Sample
41bc84af1f9b1d5ce339c30f7506d09b.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
41bc84af1f9b1d5ce339c30f7506d09b.exe
Resource
win10v2004-20231222-en
General
-
Target
41bc84af1f9b1d5ce339c30f7506d09b
-
Size
183KB
-
MD5
41bc84af1f9b1d5ce339c30f7506d09b
-
SHA1
98664b133b7dbda9bc57d711142d69f8fbe7579a
-
SHA256
bd4dae18117a1c91c7d92411e36a17f8a5c8ce33404c79cc7dceddea373c5ac2
-
SHA512
8ecdb85b2feb77b6208b3f8e22302aa65c158a8953591f899556f8097d79870e09e820dbf381280fd42dd6e32e2b345e54531f78bf3f6fb5386b20166ec08091
-
SSDEEP
3072:tku+g0g/VWvjKlSLuFSDClVmvqg6CoRAIf+G0Jxx:IzgtWvjMS6FWKVaqpKxJP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41bc84af1f9b1d5ce339c30f7506d09b
Files
-
41bc84af1f9b1d5ce339c30f7506d09b.exe windows:5 windows x86 arch:x86
3af3eabc24a8aeabb57fd851189b390e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
mscoree
CorBindToRuntimeEx
user32
MessageBoxA
oleaut32
SafeArrayUnlock
Sections
.text Size: 3KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE