Static task
static1
Behavioral task
behavioral1
Sample
41c55487b1963ad0c36fb2a557acb1cd.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
41c55487b1963ad0c36fb2a557acb1cd.exe
Resource
win10v2004-20231215-en
General
-
Target
41c55487b1963ad0c36fb2a557acb1cd
-
Size
300KB
-
MD5
41c55487b1963ad0c36fb2a557acb1cd
-
SHA1
5ae731dc95d31653a0619ae0c055f29c32c05c13
-
SHA256
fff4335f50bf67a982e1a0cb2365fc7f507fb4528404fc6a840402043dd7e040
-
SHA512
a691f7fdefa81d572e4406e1577c0984b0b244c827900cd18d0a032a39e9fc0a14d02553c2b5ebb7c3bfe2cee2cbaccce6447e644be23ee1dd9696af62ccadeb
-
SSDEEP
6144:L69yEA0koSPTSRu1tl1tV7A14LrshmwCcrnnoEfEeqyu:L6fXZUntV05hpzRqyu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41c55487b1963ad0c36fb2a557acb1cd
Files
-
41c55487b1963ad0c36fb2a557acb1cd.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.c6l7rp Size: 1KB - Virtual size: 332KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.o5vvox Size: - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.twycgm Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qrev0j Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.8zal19 Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.29zhkf Size: - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cs2sp6 Size: - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.info Size: - Virtual size: 3.0MB
.rdata Size: - Virtual size: 452KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 288KB - Virtual size: 292KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE