Static task
static1
Behavioral task
behavioral1
Sample
44c454a39eade69d33e99d63364f9446416d1b73c9193ffec27da0431be082cd.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
44c454a39eade69d33e99d63364f9446416d1b73c9193ffec27da0431be082cd.exe
Resource
win10v2004-20240226-en
General
-
Target
44c454a39eade69d33e99d63364f9446416d1b73c9193ffec27da0431be082cd.exe
-
Size
2.5MB
-
MD5
3600282fc974c820115a7eb2d857cdd4
-
SHA1
1a2257b3c73fbe3d77191d00ae231ddb726c2ddc
-
SHA256
44c454a39eade69d33e99d63364f9446416d1b73c9193ffec27da0431be082cd
-
SHA512
3b761e72b80f3570107d31fd5fbc2ecfd2a9302751edd07152d9a03514aca283e18f1bae9d373602e73a855a3c228254b1f67ca7f5f34f9c77f8d3f66e40ce03
-
SSDEEP
49152:C9TyCC2GW7ItkXi5wwW171HugB/wp4Yz0Cx:MHC2jwP5wwW1ZHXBm4/M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 44c454a39eade69d33e99d63364f9446416d1b73c9193ffec27da0431be082cd.exe
Files
-
44c454a39eade69d33e99d63364f9446416d1b73c9193ffec27da0431be082cd.exe.exe windows:1 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 592B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ