Static task
static1
Behavioral task
behavioral1
Sample
44254a46993988740c5948b855987d7c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
44254a46993988740c5948b855987d7c.exe
Resource
win10v2004-20231215-en
General
-
Target
44254a46993988740c5948b855987d7c
-
Size
74KB
-
MD5
44254a46993988740c5948b855987d7c
-
SHA1
4af6b8f39ce87afd538da17859a3225ca1d36988
-
SHA256
cbee6aa7378eeffba26dc6e74df7ae2489cf8dd9bba36f225d00ab9c8cc0ed46
-
SHA512
2bd903852d35c154284c480fcb0c9fa0e76acc9b0592f14fabd77ab3fced8dd1c2287d354acc98474d9634faac9f7de5bce6ba58524f96b51b83de498a6f0f4c
-
SSDEEP
1536:JJACRdkz7H+ywwmdWVRihYSnyDK4TA/T6fgX85F:JJA7z9wxgDK4TA/T+gYF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 44254a46993988740c5948b855987d7c
Files
-
44254a46993988740c5948b855987d7c.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 69KB - Virtual size: 69KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ