Static task
static1
Behavioral task
behavioral1
Sample
44afbfb216190659793c6dc68c53f880.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
44afbfb216190659793c6dc68c53f880.exe
Resource
win10v2004-20231215-en
General
-
Target
44afbfb216190659793c6dc68c53f880
-
Size
3KB
-
MD5
44afbfb216190659793c6dc68c53f880
-
SHA1
d5139fc384292f2127509b4799b8bfb3522df629
-
SHA256
d738ba5b178c0bd26e014064e594b67406896219a46dc79dbf097d617b947ac9
-
SHA512
544edd395e67f7c248f1db831eea3c9ee06f131aa85d620dee25f856752e193b0be56b41afb0e6cb4b78ab59aad8cb59ae3d9fe1dc60ca3b9645614cddcbdbda
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 44afbfb216190659793c6dc68c53f880
Files
-
44afbfb216190659793c6dc68c53f880.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 484B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 459KB - Virtual size: 459KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ