Static task
static1
Behavioral task
behavioral1
Sample
41e0b5233ee78cf5cb552d9c6c432a1b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
41e0b5233ee78cf5cb552d9c6c432a1b.exe
Resource
win10v2004-20231222-en
General
-
Target
41e0b5233ee78cf5cb552d9c6c432a1b
-
Size
1.1MB
-
MD5
41e0b5233ee78cf5cb552d9c6c432a1b
-
SHA1
857902b4c533713abf479f686e79b2d857a20672
-
SHA256
8cf341b270a133b3aeeb880c8896b870121fb43abe0ac24a46d375f5ef39c571
-
SHA512
3e88712fe808fb2b8a9f47a9d1c2694e30a6b9012ffde53ad0008803439286f2dc2450ff5f6adee6255756020b11163bc948845083700a6a9a7a667bec0d1a13
-
SSDEEP
6144:1lh98W0agwM4n3iSP2Re8J2Tc8XgStd0vEc:1/9f0agvjk7Qyd03
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41e0b5233ee78cf5cb552d9c6c432a1b
Files
-
41e0b5233ee78cf5cb552d9c6c432a1b.exe windows:4 windows x86 arch:x86
e4dc10acd5ea1372d4e28c0c8fe74449
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FileTimeToSystemTime
GetSystemTimeAsFileTime
GetLocalTime
GetProcAddress
LoadLibraryExW
VirtualProtect
GetLocaleInfoA
GetModuleHandleA
GetStartupInfoW
GetVersionExA
RaiseException
LoadLibraryA
DebugBreak
HeapFree
HeapAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetLastError
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
CloseHandle
GetProcessHeap
FreeLibrary
VirtualAlloc
HeapReAlloc
IsBadWritePtr
RtlUnwind
InterlockedExchange
VirtualQuery
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetStringTypeA
GetStringTypeW
LCMapStringA
WideCharToMultiByte
LCMapStringW
HeapSize
GetACP
GetOEMCP
GetCPInfo
GetSystemInfo
oleaut32
SysAllocStringByteLen
Sections
.rda1831 Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 108KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 184KB - Virtual size: 233KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE