Static task
static1
Behavioral task
behavioral1
Sample
00044057cacf7a42d1f7ec570d1ee027.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
00044057cacf7a42d1f7ec570d1ee027.exe
Resource
win10v2004-20231215-en
General
-
Target
00044057cacf7a42d1f7ec570d1ee027
-
Size
393KB
-
MD5
00044057cacf7a42d1f7ec570d1ee027
-
SHA1
9bf11a51c798d07bb56918cf33e49b3d2d143f68
-
SHA256
5ebd53dd8c8d3e4e8e62c675676b8683b43a2bf4835bd8b022f8e02f9ddb4ec6
-
SHA512
44b0e9127ac8daced4363dd1f7952db4d864650043206953a474a69599a977622e98e8ca715ef2f4d5fb294c5ce8aaee4e4e218c729176536829b3c4bd5be2f6
-
SSDEEP
12288:P3KpJI6xj1dV9fJcEXW4OYIb5IiENCa76:PCb1dV9fJhXWGHNL6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00044057cacf7a42d1f7ec570d1ee027
Files
-
00044057cacf7a42d1f7ec570d1ee027.exe windows:4 windows x86 arch:x86
f155fd171803c7a8131faf3792f87a72
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalLock
GlobalUnlock
GetACP
GetCalendarInfoA
CreateFileMappingA
FindClose
GetConsoleAliasA
Sleep
CloseHandle
WaitForMultipleObjects
LoadLibraryExA
HeapCreate
CreateFileA
GetConsoleCP
TlsGetValue
LocalFree
GetModuleHandleA
GetLastError
FreeEnvironmentStringsA
FindAtomA
user32
GetDlgItem
CascadeWindows
CallWindowProcA
GetDC
GetIconInfo
IsWindow
CreateDialogParamA
SetFocus
DefWindowProcA
DrawTextA
DrawEdge
GetMessageA
DispatchMessageA
MessageBoxA
msasn1
ASN1BERDecEoid
ASN1BERDecCheck
ASN1BEREncLength
ASN1BERDecSkip
ASN1BERDecNull
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ