Static task
static1
Behavioral task
behavioral1
Sample
41b79f79ef00c11cb34bad34697b984bcc7411a13dc3c276247abf07e5d607eb.exe
Resource
win7-20240903-en
General
-
Target
41b79f79ef00c11cb34bad34697b984bcc7411a13dc3c276247abf07e5d607eb.exe
-
Size
3.1MB
-
MD5
23c7b9248f3dad496485fad4eaadd5ea
-
SHA1
76ac41eb3213710941c32bd8a07fa2e6b7ecc826
-
SHA256
41b79f79ef00c11cb34bad34697b984bcc7411a13dc3c276247abf07e5d607eb
-
SHA512
eebaf1961274ea345d5fbff45f1453fb89dfbf9b15f9fcb3beb6f29a133af3e3d81a8428c022f57d5c922cebbd48842559fc788b37cc70e5219356472ca6ab38
-
SSDEEP
49152:jmqDbVLbPxHuTnc4DTZDpGpEWFuWB0g7XWDh9VYwlMXY1oUATNp:qqDbVfPQTnc4DTMEWbjrWN9VYwWXEsp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41b79f79ef00c11cb34bad34697b984bcc7411a13dc3c276247abf07e5d607eb.exe
Files
-
41b79f79ef00c11cb34bad34697b984bcc7411a13dc3c276247abf07e5d607eb.exe.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 416KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tovthvzp Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hklqcmei Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE