Static task
static1
Behavioral task
behavioral1
Sample
a44071df1a588ae7e881514d4d7d86ae.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a44071df1a588ae7e881514d4d7d86ae.exe
Resource
win10v2004-20240221-en
General
-
Target
a44071df1a588ae7e881514d4d7d86ae
-
Size
92KB
-
MD5
a44071df1a588ae7e881514d4d7d86ae
-
SHA1
53df3661d996ce728a6c05b1516b7b11a4b0f90a
-
SHA256
e403086972b5b33e24ee155596a34f7bacad737e64df5c6c1b07927b9464ddf6
-
SHA512
4f560a7d12c5fed32ab5f8537e4bda8f2a0e50d1e386fe7a71923760f644c9bf40740cecb75f9c6017eb10389367523ed0a71952a9e2c07a4a3951ba51299cd3
-
SSDEEP
1536:bO+I6Qwjmkk2e3Kol4VP7uSOqd20PGxFKzf170LOrY:0CM3KomVPSLO20O/Kzf2j
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a44071df1a588ae7e881514d4d7d86ae
Files
-
a44071df1a588ae7e881514d4d7d86ae.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 662KB - Virtual size: 661KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 181KB - Virtual size: 181KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 31KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 3B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19.6MB - Virtual size: 19.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ