Static task
static1
Behavioral task
behavioral1
Sample
44a5635e950202e439d2a34b09f00d857dfafc879376924986523e6796524edd.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
44a5635e950202e439d2a34b09f00d857dfafc879376924986523e6796524edd.exe
Resource
win10v2004-20240412-en
General
-
Target
44a5635e950202e439d2a34b09f00d857dfafc879376924986523e6796524edd
-
Size
1.4MB
-
MD5
a85b6c73d3c93d61b6ab399a760a11b9
-
SHA1
f9279cb59c35c529beea9c699b4d1c221e024577
-
SHA256
44a5635e950202e439d2a34b09f00d857dfafc879376924986523e6796524edd
-
SHA512
4869b450f3a768277531beee0fed28394e0a9acbb356a782586d7a5d0039ec329763e9b21f48e926e6eab535e3769ceb003c15bac637c3b548baa241645a21c0
-
SSDEEP
24576:F784EspaiGhP1x+96UBz1V/7hw5CILSbvCDpmdLq9zyMfNyAGW6xRZzXeyNbgQF1:F784CiI1k9/HYCtMpK2zyM45fzuYbgQb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 44a5635e950202e439d2a34b09f00d857dfafc879376924986523e6796524edd
Files
-
44a5635e950202e439d2a34b09f00d857dfafc879376924986523e6796524edd.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE