Static task
static1
Behavioral task
behavioral1
Sample
044ee8c4901874be6e7e47dfa7580a9e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
044ee8c4901874be6e7e47dfa7580a9e.exe
Resource
win10v2004-20231215-en
General
-
Target
044ee8c4901874be6e7e47dfa7580a9e
-
Size
23KB
-
MD5
044ee8c4901874be6e7e47dfa7580a9e
-
SHA1
dc6eb01e123e200d9c9e59e760df0da26316de3e
-
SHA256
e373f6375fa4396b5933d9b719d1e42e078b7c699ec099cf054b6942329a66e5
-
SHA512
f86c3b6bef7553bf50c9c9f727405956914b75510781062e5b1d7db2d3f4cdbb94801b3b45ff5a8e5c618e1d7174f5a2dbed754c0d80599ccef6f7e76252ee9f
-
SSDEEP
384:/2uH2vDA7Njmrm1AmzOI4eJdbFKEZwnDC/IHav0T8nu7kwQAqxsomQEYWc9SKU:/d2U9mrm1PSI4eJdFZL/IHasF7HQAloa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 044ee8c4901874be6e7e47dfa7580a9e
Files
-
044ee8c4901874be6e7e47dfa7580a9e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.dere0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dere1 Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dere2 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE