Start
Static task
static1
Behavioral task
behavioral1
Sample
41bb880aec0f5cf5058b634ba751e51aca74cccafeb6b00e20f7a1f933205194.exe
Resource
win10v2004-20240412-en
General
-
Target
41bb880aec0f5cf5058b634ba751e51aca74cccafeb6b00e20f7a1f933205194
-
Size
2.1MB
-
MD5
8cc3960af64e8566c41e26beb65e6845
-
SHA1
ca05775942f7ba9c337c38cb056509da5f6cddfa
-
SHA256
41bb880aec0f5cf5058b634ba751e51aca74cccafeb6b00e20f7a1f933205194
-
SHA512
eafa388d485257979b17e52c2e84f01f4b5cd1ead6bd96745a24ab1a6fdfaaf03ef20db99c2647d841ce800f866bddab030f313e3a8513f3fdfc5e23c178df3f
-
SSDEEP
49152:bSUl6vD5DxN6HHLJFwcIgvsC4OGaIruwBgb/PQRj0P5pc4tR+:bSSwD5DxkTyJruOgbHQk5p
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41bb880aec0f5cf5058b634ba751e51aca74cccafeb6b00e20f7a1f933205194
Files
-
41bb880aec0f5cf5058b634ba751e51aca74cccafeb6b00e20f7a1f933205194.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Exports
Exports
Sections
Size: 591KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
scvoaemb Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dzgprscj Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE