Static task
static1
Behavioral task
behavioral1
Sample
41db94763552e0c8564284af14d8fff3.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
41db94763552e0c8564284af14d8fff3.exe
Resource
win10v2004-20231215-en
General
-
Target
41db94763552e0c8564284af14d8fff3
-
Size
141KB
-
MD5
41db94763552e0c8564284af14d8fff3
-
SHA1
fc62147c0a60406ca0bea5ae582d9aa749003a60
-
SHA256
50b54d59c7b069bbd3418e24f3a5ab1a334653a0e16061cdff77513866eddfbe
-
SHA512
07f8ec6d00c333cc3c566823a52b893a28e8d82fedc7d0fa92242b44a05d4f52e79b69f30f0657f266f9f79492cf368868f9e1a5d9b49a4afff803f7c91c386e
-
SSDEEP
3072:QL/Pv6WhkZkQ3yjLKcNl2SUuL57XbhDmDwfgqzbHlZOWy:E/Pi+kZWKcNx157rkObHlZOWy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41db94763552e0c8564284af14d8fff3
Files
-
41db94763552e0c8564284af14d8fff3.exe windows:5 windows x86 arch:x86
06d90141d3fdab7f9e0de825e6c197f0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileSize
Sections
���@B�0� Size: - Virtual size: 240KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
��?��ڨ� Size: 137KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
e�2��;� Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ