Behavioral task
behavioral1
Sample
44bafc92558bd01ebd3e54f4ed811e40.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
44bafc92558bd01ebd3e54f4ed811e40.exe
Resource
win10v2004-20231222-en
General
-
Target
44bafc92558bd01ebd3e54f4ed811e40
-
Size
379KB
-
MD5
44bafc92558bd01ebd3e54f4ed811e40
-
SHA1
77d2312fdf60c45461ac26695da08d570ecff264
-
SHA256
5bd44b2ed771f2959ca79b4be29ae1ad78e913ebe7103e2ac6f4b06e9c3e75b9
-
SHA512
781a7958d5859750e9e94bea8c3dbf448d118dd8700b8aedab40f0ed27455ce3639617f7a18471b0f0fc26c326d0ad9ecb79bb952535528290651f99e323f9db
-
SSDEEP
6144:X+qn/00gA1pJzXsWuTHgU9xGJRKeOGDykNwS1F8kqslg92YAoS0LEQ:Ps03z8tgkGJRxpw4osO2JoS0LEQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 44bafc92558bd01ebd3e54f4ed811e40
Files
-
44bafc92558bd01ebd3e54f4ed811e40.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 880KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 305KB - Virtual size: 308KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE