Static task
static1
Behavioral task
behavioral1
Sample
b41b048107cd98ab8bff74ddbcc6b98a.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b41b048107cd98ab8bff74ddbcc6b98a.exe
Resource
win10v2004-20240226-en
General
-
Target
b41b048107cd98ab8bff74ddbcc6b98a
-
Size
506KB
-
MD5
b41b048107cd98ab8bff74ddbcc6b98a
-
SHA1
b5f20f244ff9bc1e447a1b7aa7a4efd5f738c857
-
SHA256
a3ace1d95a4b2263495933324970fcc7cad2d24ff5e547086d1ce39370007250
-
SHA512
986a63edf8ad1862585018ca99b2ec79298a320b0019256d7ad96e113bf0ad6b0b65b4cd9e5acbf03cc20305b9ad525b78c0eed11b226d13207d0475541d2e55
-
SSDEEP
12288:pZpuUCUSD4oh3J6yFdXlui51Q6aEGj0+DOXT+jqqYsdhhhyjo1dDKWnhNcIn3e:fpTi0o5JdcEGjJ8T+jqvsDhhyjo1dDKB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b41b048107cd98ab8bff74ddbcc6b98a
Files
-
b41b048107cd98ab8bff74ddbcc6b98a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 475KB - Virtual size: 474KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ