Static task
static1
Behavioral task
behavioral1
Sample
0b44cc975d5602a97bbf3de86874322f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0b44cc975d5602a97bbf3de86874322f.exe
Resource
win10v2004-20231215-en
General
-
Target
0b44cc975d5602a97bbf3de86874322f
-
Size
45KB
-
MD5
0b44cc975d5602a97bbf3de86874322f
-
SHA1
85014ef3bc28c1bafec75fd57968b029927b8281
-
SHA256
e7a678417234a6f4b7052db3f165e25f5938bbbc5dd03c921e178cfdfaa0e18b
-
SHA512
04e706b8b6202479c2fff27b0f0918c504e402f4d5ae6a5bdc64efb7c4e3852711ccf60edc11a04927c8c6626731329abc08821d5a87eedaa6d85dbf6b7a9669
-
SSDEEP
768:vRnhuuEYdzIUqJCHTZ72xu1DM1K5wGRkITDhhRNh4YH2oJfk3wx22lulllYbXwX:5nhhblqJCHTZso4RwkITDhh54VCfk3wI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b44cc975d5602a97bbf3de86874322f
Files
-
0b44cc975d5602a97bbf3de86874322f.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.rsrc Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ