Static task
static1
Behavioral task
behavioral1
Sample
c944ac0dcf29e58492bf7d8646597b4c.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c944ac0dcf29e58492bf7d8646597b4c.exe
Resource
win10v2004-20240226-en
General
-
Target
c944ac0dcf29e58492bf7d8646597b4c
-
Size
23KB
-
MD5
c944ac0dcf29e58492bf7d8646597b4c
-
SHA1
165d65c40ee7096a65bb637e04943f81b500df0d
-
SHA256
0b4af4dab97c7218baca2639de991a5e2680305330ae93c2d34ff4676655a5cf
-
SHA512
29f495496c0df2e6aed7efdd6ab4ce5ce4d70bd4dee5dd5456005833ad7bed16e0c3ded4f8fa1e0ef010bc854efd72c5c50105e544e65dafc70710960248b83b
-
SSDEEP
384:y5i/dgXW5G4tbg32rvHWzCnrUUgojhvWWaX3yYd4p63S7+JCubbL7gzkZe0VizBC:KLXWx9FHWzLUgSvXe5S63S7+0ubbUN0V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c944ac0dcf29e58492bf7d8646597b4c
Files
-
c944ac0dcf29e58492bf7d8646597b4c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE