Static task
static1
Behavioral task
behavioral1
Sample
44be59f91414ba0951aa8a9067d9ed2bebb3387e2d480571847e3b4b66af48c4.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
44be59f91414ba0951aa8a9067d9ed2bebb3387e2d480571847e3b4b66af48c4.exe
Resource
win10v2004-20230915-en
General
-
Target
44be59f91414ba0951aa8a9067d9ed2bebb3387e2d480571847e3b4b66af48c4
-
Size
189KB
-
MD5
e5c7047e3c5531b8692db187723ef75c
-
SHA1
ab20485ce233a7dac7d24d4e1a125b27e7379ec0
-
SHA256
44be59f91414ba0951aa8a9067d9ed2bebb3387e2d480571847e3b4b66af48c4
-
SHA512
2223bd5626e45e5edcd013720b3342626aee6d80df14460372a4e1a1f07ed2c8ff2ef017db2572b369f1d617d7d66da506d41a75d36c4a0b90a66ea12c4ba333
-
SSDEEP
3072:g39tE0jCa1PaYSPl90Iq46xl45FF5ztC3yd0P/MMTgkpLUb/y9QVopFon6JD01kU:27jC6aYSPYTG5FDKHP/Mq0Hop2njSED
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 44be59f91414ba0951aa8a9067d9ed2bebb3387e2d480571847e3b4b66af48c4
Files
-
44be59f91414ba0951aa8a9067d9ed2bebb3387e2d480571847e3b4b66af48c4.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 1KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: - Virtual size: 616KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.shoooo Size: 170KB - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE