Static task
static1
Behavioral task
behavioral1
Sample
d44d19b1b3585e6b571e00e44ab71c0a.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d44d19b1b3585e6b571e00e44ab71c0a.exe
Resource
win10v2004-20231215-en
General
-
Target
d44d19b1b3585e6b571e00e44ab71c0a
-
Size
2.2MB
-
MD5
d44d19b1b3585e6b571e00e44ab71c0a
-
SHA1
7bfd2396e97912885dfeec904043d1440968650e
-
SHA256
727c640f98a0cafa4fce5bdad61b74c717a9ef23ec8781f43c622bc0a2e2ef18
-
SHA512
af82e2695fd2f25591ffc4e81e584ea82033426726aa9f6279566cd6271be4d65cb0e9fd9e8bee465d9526476ea4b053b3d838e9b12a3a983cac38c0cb3dffc9
-
SSDEEP
49152:7ib3AIHXMnc1uH97nwSd9gOO6AB6IH1H6gyMXyKS9pVKAJO0TXm8a:7ijn8nc1uH97Jd9VABPH1jyMXyL9pVKZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d44d19b1b3585e6b571e00e44ab71c0a
Files
-
d44d19b1b3585e6b571e00e44ab71c0a.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 396KB - Virtual size: 396KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 26KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 179KB - Virtual size: 178KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ