Static task
static1
Behavioral task
behavioral1
Sample
541dc03a09ad17a63a8639e0536fa2dd.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
541dc03a09ad17a63a8639e0536fa2dd.exe
Resource
win10v2004-20231222-en
General
-
Target
541dc03a09ad17a63a8639e0536fa2dd.exe
-
Size
408KB
-
MD5
541dc03a09ad17a63a8639e0536fa2dd
-
SHA1
55aee0fa96afa71a88cf91a7e75fcee222080c4e
-
SHA256
dd3e4715615501046f76cd972972aa63f9074df07edeaf692ea4b9885d49b86e
-
SHA512
de400d376e3b752e0ad5c3dfc06ee64a63501b568bf414afe4f1664099fab3c55df6ba4360f34d7d90882712638cda65d55d93a0082f4f3fb28c3719a9312bb8
-
SSDEEP
12288:mzgnC5Oywmeui5h6DudfScWNfs5Wm3/vJpg+iA5uAFeY:mzgnOwmlir6ClScWZVm3/vT6A5uAUY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 541dc03a09ad17a63a8639e0536fa2dd.exe
Files
-
541dc03a09ad17a63a8639e0536fa2dd.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 58KB - Virtual size: 512KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Virus Size: 346KB - Virtual size: 840KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE