Static task
static1
Behavioral task
behavioral1
Sample
44d5799787ae99c3c45e7115d8749a54.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
44d5799787ae99c3c45e7115d8749a54.exe
Resource
win10v2004-20231215-en
General
-
Target
44d5799787ae99c3c45e7115d8749a54
-
Size
486KB
-
MD5
44d5799787ae99c3c45e7115d8749a54
-
SHA1
494fb6c2e8b7bf787e7c9c5a4d967a33847ce726
-
SHA256
e4655c60be891ec3a87a63e01f3eaf02cc3c0751a8f7d4feff53c7072bcb3ae9
-
SHA512
8fb40cff1f527620499f50454f8927687b57220152f6f716ecdc410474a9665c924ce72aae166fc0a12dec7fec72e1a8134198c433bb3ae937ef133cd2fb2707
-
SSDEEP
12288:zdz1aek1DUn6ds8Z7NDVafYnXr8fH4O7tJYHegVe2ZYpMTzjK:5z7rArmfYXQv4GJoeg42tzjK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 44d5799787ae99c3c45e7115d8749a54
Files
-
44d5799787ae99c3c45e7115d8749a54.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
3333 Size: - Virtual size: 328KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3333 Size: 456KB - Virtual size: 460KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE