Static task
static1
Behavioral task
behavioral1
Sample
d44bdf5002efb342961208af7c14932a.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
d44bdf5002efb342961208af7c14932a.exe
Resource
win10v2004-20240226-en
General
-
Target
d44bdf5002efb342961208af7c14932a
-
Size
6KB
-
MD5
d44bdf5002efb342961208af7c14932a
-
SHA1
eb17a5e5519e21746e97c4a7ac6901d23c0be4e6
-
SHA256
e161ddb3157e7712d65ffdceb28f7990b566857a2dad0627f7144c2d9a3b58dc
-
SHA512
cc0db28567a67b856a48975ecf5addfad58d257f503a60faf220e2b286e408db6cbb364e06d33d3394917a2448ed58bee53bcb48657327d73bf573a610f220c2
-
SSDEEP
192:nVJdDV4Paqnz9tNPhvll6p20h+OyIhwl+:lGxNsdql+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d44bdf5002efb342961208af7c14932a
Files
-
d44bdf5002efb342961208af7c14932a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE