Static task
static1
Behavioral task
behavioral1
Sample
449c84d7fc8736417a20803c6a62c0b4.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
449c84d7fc8736417a20803c6a62c0b4.exe
Resource
win10v2004-20231215-en
General
-
Target
449c84d7fc8736417a20803c6a62c0b4
-
Size
92KB
-
MD5
449c84d7fc8736417a20803c6a62c0b4
-
SHA1
65af292109f0ded774660a85b88fcdcc9a39bab6
-
SHA256
44effb7dfe2a07bbb1bde2f873d0cebf3ff3101d3702417dce178e7acde1c240
-
SHA512
a0b27062cef4235afa4ab4bf57a0dafaa26b8ae2470cf647c3714aaa1a722e30f6dea18e3449ab8fa4867a57ef3aa07c7d9ea9878bcc06b423721aa5e01b974f
-
SSDEEP
1536:yrRfnajT+sinhu2AZlR+0ajjpc9Vgv3VX3xXMru/HtxZ83YacIyP/69QAq0Gb8/Y:iRCjaj+00aZcAPxBXM6hKYBbWq0GQP0j
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 449c84d7fc8736417a20803c6a62c0b4
Files
-
449c84d7fc8736417a20803c6a62c0b4.exe windows:4 windows x86 arch:x86
6e1cc02c8d36508d37ba1b68ad89958d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetPrivateProfileSectionW
BaseCleanupAppcompatCache
OpenFile
LZOpenFileA
HeapExtend
SetUserGeoID
ValidateLCType
RemoveVectoredExceptionHandler
OpenJobObjectW
FlushFileBuffers
GetLocaleInfoA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 36KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE