Static task
static1
Behavioral task
behavioral1
Sample
44f168384a960d75afc10e8d12608f0a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
44f168384a960d75afc10e8d12608f0a.exe
Resource
win10v2004-20231215-en
General
-
Target
44f168384a960d75afc10e8d12608f0a
-
Size
49KB
-
MD5
44f168384a960d75afc10e8d12608f0a
-
SHA1
95563cf7898d531ef9ea1a440da335d4fd6d727c
-
SHA256
eb33043e50ca90f11058bfdbb1a4fdb3a85b80ea1f9d1e7e3f314fc94a3c5ec5
-
SHA512
db7ff6862e70bb35c75c8588a031cefe101c59f38bd22d7249b8f19ffeecd74945cf88b8c874a093c639aaab22a451051493a85a5d099a41f60ad78a13da1be0
-
SSDEEP
768:EyW1yBtObv0U/xwPp0EoooiYECG2nZF5sZVcmxgsk:24Bobv7aB0EooYEC3rUVcYgN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 44f168384a960d75afc10e8d12608f0a
Files
-
44f168384a960d75afc10e8d12608f0a.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.rsrc Size: 19KB - Virtual size: 28KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
coderpub Size: 2KB - Virtual size: 3KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE