Static task
static1
Behavioral task
behavioral1
Sample
44127568cf94af194acca18c4e6ac78ec2077b817a193c8528473303fa0c863c.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
44127568cf94af194acca18c4e6ac78ec2077b817a193c8528473303fa0c863c.exe
Resource
win10v2004-20240508-en
General
-
Target
44127568cf94af194acca18c4e6ac78ec2077b817a193c8528473303fa0c863c
-
Size
14KB
-
MD5
18f2a413494816df84fd5eddfccb60f8
-
SHA1
ab0d9f6eb90458ccc89d30ef20aebb0b674e04d6
-
SHA256
44127568cf94af194acca18c4e6ac78ec2077b817a193c8528473303fa0c863c
-
SHA512
4f20bbb214ed382545d4dcb571c60cbf1d83920179071887dd31c8f22d403a16768b89eb370c90504df8bac17399b0079de7d33d83ece9eb454e6c5054bf400f
-
SSDEEP
384:fGqbNJbbXCipppppppppea2BokVDE045H:fGGNJbbSVa2BJA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 44127568cf94af194acca18c4e6ac78ec2077b817a193c8528473303fa0c863c
Files
-
44127568cf94af194acca18c4e6ac78ec2077b817a193c8528473303fa0c863c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ