Static task
static1
Behavioral task
behavioral1
Sample
41fcb12945f9c6a5a7ea730a96e5eb94.exe
Resource
win7-20240221-en
General
-
Target
41fcb12945f9c6a5a7ea730a96e5eb94
-
Size
344KB
-
MD5
41fcb12945f9c6a5a7ea730a96e5eb94
-
SHA1
fdbed981e75f920889cf810b00763ca0e7ea733c
-
SHA256
58544634f21896e32e59b3f761d80ec77a3643142c6f55af020fd5fde487155f
-
SHA512
46f43fe67dd59200f1815f15250d735feb883c186c92d503f3d80ff0a6380ec004a1ab767ef77009a47cfbddf02af1c2a85bd551ae536545e3e280f2982120a5
-
SSDEEP
6144:SF/gEKyOAuuHcqXt96bHa+bZu0k6XCCbd2CKcwA2x9G+84AmGSnct:SF/gVyduuHv946gZ6bCbd2qspnA6G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41fcb12945f9c6a5a7ea730a96e5eb94
Files
-
41fcb12945f9c6a5a7ea730a96e5eb94.exe windows:5 windows x86 arch:x86
4c748fceb46cf87075e0849b9251106c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
GetDC
advapi32
RegCloseKey
shell32
ShellExecuteW
ws2_32
recv
iphlpapi
GetAdaptersInfo
oleacc
LresultFromObject
gdi32
SaveDC
winspool.drv
OpenPrinterW
oleaut32
VariantClear
Sections
.MPRESS1 Size: 285KB - Virtual size: 500KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE