Static task
static1
Behavioral task
behavioral1
Sample
44988f8af780f70abd67c5d733730e49.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
44988f8af780f70abd67c5d733730e49.exe
Resource
win10v2004-20231215-en
General
-
Target
44988f8af780f70abd67c5d733730e49
-
Size
152KB
-
MD5
44988f8af780f70abd67c5d733730e49
-
SHA1
244f5674234c887cdaf1fedee973031775dbbe89
-
SHA256
127e061b1795c2e43727157a588ffd4f29490e7091fbdc1540e1581e349e5cec
-
SHA512
8849504f84959052496fa1167a350d11a468b7b5971394310d25dbcb4768afe3a9e208ec0469048c41c030157dc74f6cec60fc667854868278f60d9763edf3a3
-
SSDEEP
3072:QbHFLiMGq9H8hRa1wlPEeMPPsJDHWHULj3:g5A8w5aCW0Lj3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 44988f8af780f70abd67c5d733730e49
Files
-
44988f8af780f70abd67c5d733730e49.exe windows:1 windows x86 arch:x86
e741f467210af2b2a4fb830fdeb68b8c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
QueryPerformanceFrequency
InterlockedDecrement
CreateFileA
GetModuleHandleA
FindFirstFileA
GetDateFormatA
lstrlenA
HeapSize
GetTickCount
SetStdHandle
LeaveCriticalSection
IsBadReadPtr
GetThreadContext
GlobalAlloc
GetConsoleOutputCP
ResumeThread
lstrcpyA
GetACP
ReadProcessMemory
Module32First
GetStartupInfoA
SetThreadAffinityMask
lstrcatA
GetVersion
VirtualQueryEx
GetConsoleCP
TlsSetValue
msvcrt
_except_handler3
_popen
__p__fmode
memcpy
exit
iswctype
_setmbcp
_ismbcl2
wcscspn
__set_app_type
_wexecve
__getmainargs
_beep
_ui64tow
_ultow
cosh
_adj_fprem1
_acmdln
_wcmdln
_adjust_fdiv
_mbscmp
strtol
_set_sbh_threshold
_XcptFilter
_controlfp
wcscoll
_i64tow
_ismbbalpha
_wenviron
_open
_exit
_initterm
_getw
__setusermatherr
_wspawnle
_setjmp
__p__commode
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 141KB - Virtual size: 141KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 110B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ