Static task
static1
Behavioral task
behavioral1
Sample
445bb471c4c393d93b8d0947e9d4db4b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
445bb471c4c393d93b8d0947e9d4db4b.exe
Resource
win10v2004-20231215-en
General
-
Target
445bb471c4c393d93b8d0947e9d4db4b
-
Size
2.9MB
-
MD5
445bb471c4c393d93b8d0947e9d4db4b
-
SHA1
4077201c1c61c3b94152e1ca09f7482cf6ac55d2
-
SHA256
37665025b8ab81580c8b09cb6f0b504a1c7023f2f1f57212803ed4db974bb897
-
SHA512
444f71ae27a5eaa9846e99c3e855a64e61491474d9352581c7add96cbe5bf294990166874ca61674c5571cf27afe5371e10dc713aec3fc461018e75731d1cafd
-
SSDEEP
49152:MyI4jZtInWnndbFsMvKFJ0yJdSRmwQR51e9dVysRX:Ml+9b+MkJ0NRZfdfRX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 445bb471c4c393d93b8d0947e9d4db4b
Files
-
445bb471c4c393d93b8d0947e9d4db4b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2.9MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
willianj Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.newimp Size: 179B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE