Static task
static1
Behavioral task
behavioral1
Sample
41daca22dc4fbc2493d86c17f409f9b5.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
41daca22dc4fbc2493d86c17f409f9b5.exe
Resource
win10v2004-20231222-en
General
-
Target
41daca22dc4fbc2493d86c17f409f9b5
-
Size
30KB
-
MD5
41daca22dc4fbc2493d86c17f409f9b5
-
SHA1
e6c84c2bef5b781c4296c893825b8d9e59432ca1
-
SHA256
54a08f045ca7e40e52b26aa2d9657804d8b728d85fdd436dbacadc2f41e7925f
-
SHA512
742612ade8367bcbe4ad13daceec6293fa4c8ed76e46b50dc0b26a5cecbaeed3c67c93952f8bfe6cdb1d9f9a87d89e1a1a5ff439b33e43e07f24a0cc40e46331
-
SSDEEP
768:QzePlorMtfeCw1KCJiSwCMZ2Pe6xYyQunbcuyD7UNq:QCdAoxiKCMkMZ2PeE7nouy8A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41daca22dc4fbc2493d86c17f409f9b5
Files
-
41daca22dc4fbc2493d86c17f409f9b5.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: - Virtual size: 184KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE