Static task
static1
Behavioral task
behavioral1
Sample
d44f42a9adc38c731056499fe61084fb.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d44f42a9adc38c731056499fe61084fb.exe
Resource
win10v2004-20240226-en
General
-
Target
d44f42a9adc38c731056499fe61084fb
-
Size
43KB
-
MD5
d44f42a9adc38c731056499fe61084fb
-
SHA1
e5eb4b72d3de28d36ba44d4b686196be80ac2ff0
-
SHA256
e747f24e735387cb67db69a64e2486092788b8844e39cfab7c3ae3c98723f29b
-
SHA512
db4d572a5c578ae17cc91b88aa50da57290a3f44d7962ea334747e9a6e1735a03ae277d8c8d4456b4e344d61cce43bd1ab39e0937a8134b8b5dfc21bf976579a
-
SSDEEP
768:NjxaxBhMmyp3ISAEuhVcpZ69jkx0FGzH5PJNPPhjQn3JxNfHhwWkYZ2VQL4OGq0n:NjiBLypAhfE65k8eBBEZf/hwLPQL4j
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d44f42a9adc38c731056499fe61084fb
Files
-
d44f42a9adc38c731056499fe61084fb.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 659KB - Virtual size: 659KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 181KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 26KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 3B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19.3MB - Virtual size: 19.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ