Static task
static1
Behavioral task
behavioral1
Sample
44b5c82ddf7f3128fd0d97983589e0b7.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
44b5c82ddf7f3128fd0d97983589e0b7.exe
Resource
win10v2004-20231215-en
General
-
Target
44b5c82ddf7f3128fd0d97983589e0b7
-
Size
300KB
-
MD5
44b5c82ddf7f3128fd0d97983589e0b7
-
SHA1
8b79b7a3c28b5f15dfce88664695b3d588e5e53c
-
SHA256
cd03335bb21e17a37a5251c68b7e718452541e8dc9543ec49d1c8afa57d73d0c
-
SHA512
e2699bef2c2be0df796d8ac86366cbac827e6246fab3843f27f896660aa18cc15b0e487fa8aeb227eca3158659b398da909d12b6658eb4c2e6faf0b614d1e028
-
SSDEEP
3072:FJjb3XrGl46pbmY+3tCiqKqlF2LKE0laUt1xLB6vN73QWgFbqE:Tbn846N/DimFxE0sueN73QzF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 44b5c82ddf7f3128fd0d97983589e0b7
Files
-
44b5c82ddf7f3128fd0d97983589e0b7.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 244KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE