Static task
static1
Behavioral task
behavioral1
Sample
044de99d896a0435cabde9effa31d6c6.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
044de99d896a0435cabde9effa31d6c6.exe
Resource
win10v2004-20231215-en
General
-
Target
044de99d896a0435cabde9effa31d6c6
-
Size
87KB
-
MD5
044de99d896a0435cabde9effa31d6c6
-
SHA1
2dd77c36ec9cc3a9c9cf712b5fbccfd0fb1a358d
-
SHA256
75f9660b031da76cc601a4a8fe4dafd65931dcbedf1714c4277cd4ff489c9905
-
SHA512
6ca5d04d8d2661503776b7b20679995bcc803831b71584483b8f89f64cb333c03f9150d5cc0e28316c1517bc1e82279447d49c37f4996fd9be14b8374582d190
-
SSDEEP
1536:EbNG2DbSItY+12pyes+FGRe4Gy+L8ed2X+s3aE5fJy4yfqYXNQFt/0:EhptY7pymFGgtLIHf8WFt/0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 044de99d896a0435cabde9effa31d6c6
Files
-
044de99d896a0435cabde9effa31d6c6.exe windows:4 windows x86 arch:x86
d5e0355f8764c235b38759b860077ceb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
LoadLibraryA
user32
MessageBoxA
Sections
.CODE Size: 34KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.BSS Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rcdata Size: 9KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 1KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rcdata Size: 1KB - Virtual size: 5.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rcdata Size: 25KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dotfix Size: 11KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE