Behavioral task
behavioral1
Sample
44957cd7ef40c55cdc991d3c07b2493c.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
44957cd7ef40c55cdc991d3c07b2493c.exe
Resource
win10v2004-20231222-en
General
-
Target
44957cd7ef40c55cdc991d3c07b2493c
-
Size
289KB
-
MD5
44957cd7ef40c55cdc991d3c07b2493c
-
SHA1
4d2f79b764a1edce3f0a19cdad1281f18c6fca72
-
SHA256
d20eeffef7de1464170605f261f0f5a484ea814010122ee88c76fcbe6d3b5ff5
-
SHA512
8532c79febef1bb6426f82049007a2f4d94b659b3d553645b181f6e0500f359f2ef67e1ba5a9333563e096f8507fa1d1b387410ee7d62ea99499bd3b2e4afb2a
-
SSDEEP
3072:sBKd/8XobOvK/wogwfAGP3d7+JqX/8HQm3CqJTW3KqAwPNCW5pFGGWEZg:Vd/n/wogw4GP3N2qX/SQmSMTW3YfOpY
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 44957cd7ef40c55cdc991d3c07b2493c
Files
-
44957cd7ef40c55cdc991d3c07b2493c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 484KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 207KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 81KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE