Static task
static1
Behavioral task
behavioral1
Sample
44aebb7999e3712193b7273fa744436c104310258a55e68a47b580da597f20e4.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
44aebb7999e3712193b7273fa744436c104310258a55e68a47b580da597f20e4.exe
Resource
win10v2004-20230915-en
General
-
Target
44aebb7999e3712193b7273fa744436c104310258a55e68a47b580da597f20e4
-
Size
3.0MB
-
MD5
99fe5575bd36648579c6c06301a98958
-
SHA1
5111cd476eec27d9d1b286179a8530365c7d101d
-
SHA256
44aebb7999e3712193b7273fa744436c104310258a55e68a47b580da597f20e4
-
SHA512
4d754c1687d70b0d0ef91c545a390b2162791c304cf9a7b4cc6aeffe55bef0bf6e45e65eb092d4c641381f7ab40fc658d2aebc4eb5252dc6bff131ec4020ed30
-
SSDEEP
49152:H7TvfU+8X9GrNOsva5RbKhF3ANkTTl4xtxBri2Cg2EBs5A:c+8X9G3vP3AMufNi2Czu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 44aebb7999e3712193b7273fa744436c104310258a55e68a47b580da597f20e4
Files
-
44aebb7999e3712193b7273fa744436c104310258a55e68a47b580da597f20e4.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 994KB - Virtual size: 994KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 147KB - Virtual size: 146KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 27KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 386KB - Virtual size: 385KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 75KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ