Static task
static1
Behavioral task
behavioral1
Sample
44f8fb4ca24e1e0bb4fd7808b2d2cdb7.exe
Resource
win7-20231201-en
Behavioral task
behavioral2
Sample
44f8fb4ca24e1e0bb4fd7808b2d2cdb7.exe
Resource
win10v2004-20231201-en
General
-
Target
44f8fb4ca24e1e0bb4fd7808b2d2cdb7
-
Size
23KB
-
MD5
44f8fb4ca24e1e0bb4fd7808b2d2cdb7
-
SHA1
d251d2a32e3ee861a4510aa458dda59dffb4a3c5
-
SHA256
060b5440579f3f3f9d18202436427a6e5bf5d12a95b666a136361d4ec3636003
-
SHA512
7961c948fc5b7e98f10f2f712c2b37cc660461383aa643e8ce81bb3b4e9601bad5e55435ba226be4b53d5755b33c732ce48ba230984df34adc6deeb919c4c2ee
-
SSDEEP
384:IbRmmOIt0K/vDxbwpgDi7ZtCtY8alJZjLzu0h9kxCyLc/ErLBop:IbRmUvDX23RZjLsCyLc/ma
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 44f8fb4ca24e1e0bb4fd7808b2d2cdb7
Files
-
44f8fb4ca24e1e0bb4fd7808b2d2cdb7.exe windows:5 windows x86 arch:x86
c07ef8bdf88571f34b5a5b7df7a82509
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MoveWindow
GetMessageW
TranslateMessage
DispatchMessageW
SendMessageW
DefWindowProcW
CreateWindowExW
EndPaint
GetClientRect
PostQuitMessage
ShowWindow
UpdateWindow
RegisterClassExW
ReleaseDC
GetDC
BeginPaint
DrawTextExW
kernel32
CreateFileW
GetModuleHandleW
gdi32
GetStockObject
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 896B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ