Static task
static1
Behavioral task
behavioral1
Sample
7441b38defa7c363e89f1c8ecb7d7142.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7441b38defa7c363e89f1c8ecb7d7142.exe
Resource
win10v2004-20231215-en
General
-
Target
7441b38defa7c363e89f1c8ecb7d7142
-
Size
244KB
-
MD5
7441b38defa7c363e89f1c8ecb7d7142
-
SHA1
7a52bb00b6f86b9850e070ce9c52769f4e3ada40
-
SHA256
8b28b5069c5f9d969471cfb5ffa93b0189051662f8f01a5f0c4ba42372b343d7
-
SHA512
4bff782d5014878fe4e126a61eec22f31827ef2af51b3d522726dfe0f562de23369fee02b4d567f4d88167de7ae504fc3ac7a5093ae37e8ec099a634fbc7969b
-
SSDEEP
3072:YcT3esrbDn6jwMDCqeHsx1pcProhtDiv4DE2B8kc6NNNLnBG9BLiDLhBT2ugArmH:DjFAwM3XiXonBG9IjaugArojaugAD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7441b38defa7c363e89f1c8ecb7d7142
Files
-
7441b38defa7c363e89f1c8ecb7d7142.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
text Size: 97KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
code Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 12B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ