Static task
static1
Behavioral task
behavioral1
Sample
41499f6d2d865182d15d48128abb0a2e6d29558b49594bf660b7341a375ac394.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
41499f6d2d865182d15d48128abb0a2e6d29558b49594bf660b7341a375ac394.exe
Resource
win10v2004-20240226-en
General
-
Target
41499f6d2d865182d15d48128abb0a2e6d29558b49594bf660b7341a375ac394
-
Size
14KB
-
MD5
567871ed833a808c5c9c0a39cf621cc8
-
SHA1
b53f500a66a497953ddcb8d737ab3033a74b53da
-
SHA256
41499f6d2d865182d15d48128abb0a2e6d29558b49594bf660b7341a375ac394
-
SHA512
e252ae7b422375546f531a36578b0677de5223c90cdac03f0702c1686d2f35f2b38efdb3ff21c3921752ee581f641e6712324a7f71a77b3f1521373716f37ea7
-
SSDEEP
384:Q403WJEbpuuuuuMEm888cPBM4NlUN0DE045H:QtWQEmPaYUcA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41499f6d2d865182d15d48128abb0a2e6d29558b49594bf660b7341a375ac394
Files
-
41499f6d2d865182d15d48128abb0a2e6d29558b49594bf660b7341a375ac394.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ