Static task
static1
Behavioral task
behavioral1
Sample
444cf6a2298b87f2566424365ff7ec1e.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
444cf6a2298b87f2566424365ff7ec1e.exe
Resource
win10v2004-20231222-en
General
-
Target
444cf6a2298b87f2566424365ff7ec1e
-
Size
9KB
-
MD5
444cf6a2298b87f2566424365ff7ec1e
-
SHA1
03dafe3c8427263bf9b67253b3072b614f4cdd83
-
SHA256
07caab71042672de12174d342fac22280914b371c831494ac50969d0d8b1e0ed
-
SHA512
2f8127598fae0528d00051512a4a1a0c85cb7c3fc113fa7922f0c355dc9c37788cd2cf5aa863b888bc101d37d06feb89d291d42abd9dd2ba77ffeb9c161e009b
-
SSDEEP
192:jBksub9MuI8neMZZ3n93Vnjdwqzo37E5z:UlFneMpFnhwqEw5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 444cf6a2298b87f2566424365ff7ec1e
Files
-
444cf6a2298b87f2566424365ff7ec1e.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ