Static task
static1
Behavioral task
behavioral1
Sample
445a47da613cf30990c0a4f24e4cf40e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
445a47da613cf30990c0a4f24e4cf40e.exe
Resource
win10v2004-20231222-en
General
-
Target
445a47da613cf30990c0a4f24e4cf40e
-
Size
907KB
-
MD5
445a47da613cf30990c0a4f24e4cf40e
-
SHA1
2f4df5eff8e79682aecc49582f95212b144b1d34
-
SHA256
c42f277cc7d139ad16bba9c42f50271eb6fd6fab2805582b3ad3cd0640aa6bbf
-
SHA512
efa583559ab6194f11ab0e74331498e664b2095a5211ade5529b7978858f106321e6db7eb127a2a3138d7c30fbef35a54f3c04251fc34df6d9db1284dd41de38
-
SSDEEP
24576:gCoDmUV+EXrdXeftCHMbstySk50sAsuNssHa/ZS1:9oDm6rRezbsUvisAsqHgS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 445a47da613cf30990c0a4f24e4cf40e
Files
-
445a47da613cf30990c0a4f24e4cf40e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 720KB - Virtual size: 719KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 156KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ