Static task
static1
Behavioral task
behavioral1
Sample
44e7563010fcda5471e10f1fe5c17950.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
44e7563010fcda5471e10f1fe5c17950.exe
Resource
win10v2004-20231222-en
General
-
Target
44e7563010fcda5471e10f1fe5c17950
-
Size
385KB
-
MD5
44e7563010fcda5471e10f1fe5c17950
-
SHA1
eb6a19bb1bdd03930ea2037be1a88736df69130e
-
SHA256
711c04928c6a1ce6f238cc928b93acdb4a21a5bb43bf51aa472ff8956e7d357c
-
SHA512
9cf4d14b9748aecf3284d57a1b4f8fc9631612a569e8bc92e0e3ffe95aeb00aa09dc51e1f0de53b4e66d545a71610cef0d76369df57aef2014849b370ab3d818
-
SSDEEP
6144:0sjPAyLFcbs9bg9982CjVYy+VgDSfrRCMwpoIo9Rzw/G6Qu090T6z7B:0EPAyhc+bgRtVXRrhIot6QuNg7B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 44e7563010fcda5471e10f1fe5c17950
Files
-
44e7563010fcda5471e10f1fe5c17950.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 352KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ