Static task
static1
Behavioral task
behavioral1
Sample
44177e925657f041e4a28112921cc9a356d2b6f911a3b1ddf699b858dabdc49c.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
44177e925657f041e4a28112921cc9a356d2b6f911a3b1ddf699b858dabdc49c.exe
Resource
win10v2004-20230915-en
General
-
Target
44177e925657f041e4a28112921cc9a356d2b6f911a3b1ddf699b858dabdc49c
-
Size
900KB
-
MD5
d14d860d096b807cc668f9f104b29279
-
SHA1
4cb4d90c79d78566c75cae4134bb8d4455126eba
-
SHA256
44177e925657f041e4a28112921cc9a356d2b6f911a3b1ddf699b858dabdc49c
-
SHA512
4ad63ba0aea180b63e7d47c3d0bb05c65fc04d2f2a265d602cace320d1822cb2dafe6630744fee83650b3aa0695c7adc5d70199734c2eb087ce4817edb49bace
-
SSDEEP
24576:Rq86lRNiNjek9lxn16EAR2K1vU3JgVrEKMWO:Rq86UeCGR3hoJgVrEW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 44177e925657f041e4a28112921cc9a356d2b6f911a3b1ddf699b858dabdc49c
Files
-
44177e925657f041e4a28112921cc9a356d2b6f911a3b1ddf699b858dabdc49c.exe windows:4 windows x86
5a498eee87e4d89512a84502f500181f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
GetModuleHandleA
LoadLibraryA
Sections
Size: 843KB - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 47KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE