Static task
static1
Behavioral task
behavioral1
Sample
44af416d357139a4f9f5f1f5ea48eaa6.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
44af416d357139a4f9f5f1f5ea48eaa6.exe
Resource
win10v2004-20231222-en
General
-
Target
44af416d357139a4f9f5f1f5ea48eaa6
-
Size
40KB
-
MD5
44af416d357139a4f9f5f1f5ea48eaa6
-
SHA1
b323027e4cbfdd4dce84d3b188561e2ba5c8e1fc
-
SHA256
21c9f57d98fb0df03afe61d35256a95923252846d8d20b6c4409f288a0b434fd
-
SHA512
732fb62786913a4bbf8cacbc98111fa9e3b27f6955a14cb7bd8e5b6a86c4a9111c585561f6e8d26d1fc1357b3f8230d5c67e898365b905673c43fda53cac2eae
-
SSDEEP
768:PB2JGYVNfV6vrFDPwp2Gt7YHN0m5vcdXwPXDzHvzExAPOE/3MwVrJ7H8oWXRrK:p2oAfIrJwp2Gium5vcxwPzzvzEx6L/Fb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 44af416d357139a4f9f5f1f5ea48eaa6
Files
-
44af416d357139a4f9f5f1f5ea48eaa6.exe windows:0 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE