Static task
static1
Behavioral task
behavioral1
Sample
41a3350a3d7e879e2eeaa471082420695e05b588dee95d6d9b36a560ae28e5f6.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
41a3350a3d7e879e2eeaa471082420695e05b588dee95d6d9b36a560ae28e5f6.exe
Resource
win10v2004-20240412-en
General
-
Target
41a3350a3d7e879e2eeaa471082420695e05b588dee95d6d9b36a560ae28e5f6
-
Size
199KB
-
MD5
7f7ed95d3e0988a6cb0ada7a3ee9da2e
-
SHA1
f853a46e1265b6a73a2b4d30c64e0a5a03c99ab4
-
SHA256
41a3350a3d7e879e2eeaa471082420695e05b588dee95d6d9b36a560ae28e5f6
-
SHA512
9355967eb574912a6d4bbb3da87d9051aa1ab0208d53ab5b1ef70a2cc3d1c72810b6e75febb375af5ee4412073f2d2c312f1c78afd259f4dffbe0b5d638c0633
-
SSDEEP
6144:QT8AwMHyuSZSCZj81+jq4peBK034YOmFz1h:WfwsaZSCG1+jheBbOmFxh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41a3350a3d7e879e2eeaa471082420695e05b588dee95d6d9b36a560ae28e5f6
Files
-
41a3350a3d7e879e2eeaa471082420695e05b588dee95d6d9b36a560ae28e5f6.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kofbl Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.l1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ