Static task
static1
Behavioral task
behavioral1
Sample
b44d0882f759ced2d0d8980e066d71a7.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b44d0882f759ced2d0d8980e066d71a7.exe
Resource
win10v2004-20240226-en
General
-
Target
b44d0882f759ced2d0d8980e066d71a7
-
Size
256KB
-
MD5
b44d0882f759ced2d0d8980e066d71a7
-
SHA1
e35340e040bdaf909eb0c2692a5075ce6242e201
-
SHA256
c43147e7151931870b2851912f9a69f00ecc4caa00e8495e053711f3198a793e
-
SHA512
05f1ac393d965afca7979b666c77b202a42a6aed3c7521d11c1d9e05553efa25d32395d5f4010a0c5098cd76d58de6e6ca31115051445b8ff47556e99d6a695e
-
SSDEEP
6144:79Wai9eJnCyBW6xNDShBka6GuK+As5YK0g:7XZRykV1K2YK0g
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b44d0882f759ced2d0d8980e066d71a7
Files
-
b44d0882f759ced2d0d8980e066d71a7.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 56KB - Virtual size:
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 188KB - Virtual size: 185KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ