Static task
static1
Behavioral task
behavioral1
Sample
411da470c2f6294365d6a4588506500c4ed3b4f39276c1c488144d7b5f0b02ee.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
411da470c2f6294365d6a4588506500c4ed3b4f39276c1c488144d7b5f0b02ee.exe
Resource
win10v2004-20241007-en
General
-
Target
411da470c2f6294365d6a4588506500c4ed3b4f39276c1c488144d7b5f0b02ee
-
Size
95KB
-
MD5
bf4867f56eee3d1a2a2b9efa2f19d747
-
SHA1
f6572a8a949921a86321380f487561b2cd6952d9
-
SHA256
411da470c2f6294365d6a4588506500c4ed3b4f39276c1c488144d7b5f0b02ee
-
SHA512
ff8841577fe97cf45eb8d5ec58a6c084cabcd87662687d1a2e1524d8e3b406958a20e6c54502b7065406e42b2236f1352577ee052a1b0d4eaf14b8c4c52ff23c
-
SSDEEP
1536:PWpaf7vZTS3oyzlEmCXayrQGKlYS9ZzfAo4AItBxOM6bOLXi8PmCofGV:PSajvZTSYaPCXaycGKyS9io4AIt/DrLD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 411da470c2f6294365d6a4588506500c4ed3b4f39276c1c488144d7b5f0b02ee
Files
-
411da470c2f6294365d6a4588506500c4ed3b4f39276c1c488144d7b5f0b02ee.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: - Virtual size: 122KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE