Static task
static1
Behavioral task
behavioral1
Sample
f44b9b7c39c0bd9dffd4cc710eb2ae6c2e38a1674c0a2cf53d9b08f39e607ee2.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
f44b9b7c39c0bd9dffd4cc710eb2ae6c2e38a1674c0a2cf53d9b08f39e607ee2.exe
Resource
win10v2004-20231023-en
General
-
Target
f44b9b7c39c0bd9dffd4cc710eb2ae6c2e38a1674c0a2cf53d9b08f39e607ee2
-
Size
4.2MB
-
MD5
1eb3635afe7e49aaf85f297d10aa84dc
-
SHA1
ff396503ec83ecd9c398a6db43247da163fa5555
-
SHA256
f44b9b7c39c0bd9dffd4cc710eb2ae6c2e38a1674c0a2cf53d9b08f39e607ee2
-
SHA512
0cb39472482b65fc1f9578354d79972219c273c0646daf8e93396cce1f1f16053c6844c2d2ddbb24b6ee7b57190d6a13910e78523c6fda740a7fc0a850c832eb
-
SSDEEP
12288:WXgvmzFHi0mo5aH0qMzd58k7F7CPJQPDHvd:WXgvOHi0mGaH0qSdjF784V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f44b9b7c39c0bd9dffd4cc710eb2ae6c2e38a1674c0a2cf53d9b08f39e607ee2
Files
-
f44b9b7c39c0bd9dffd4cc710eb2ae6c2e38a1674c0a2cf53d9b08f39e607ee2.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 208KB - Virtual size: 162KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 36KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 152KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE