Static task
static1
Behavioral task
behavioral1
Sample
844fe8dbeac931d0ded94f2862f806c5c7cfa0b7b2d43d43e70b2ea7d96dc164.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
844fe8dbeac931d0ded94f2862f806c5c7cfa0b7b2d43d43e70b2ea7d96dc164.exe
Resource
win10v2004-20240802-en
General
-
Target
844fe8dbeac931d0ded94f2862f806c5c7cfa0b7b2d43d43e70b2ea7d96dc164
-
Size
94KB
-
MD5
46adff811833881c80ef09a410b3ebf9
-
SHA1
a03cd9d1cb8f5a6e05acf4b8fb6640b30c46f31d
-
SHA256
844fe8dbeac931d0ded94f2862f806c5c7cfa0b7b2d43d43e70b2ea7d96dc164
-
SHA512
837084eaf803fea3237b2bab78686676f301eefd6ccbb8662b25896603c3075985f845b589413d5f5fcae390cf7058e7d46f4b795aefc0a27d54a77edf1deb4f
-
SSDEEP
1536:KI2b3Td7bYbmyy8OH1B3zoz+WkLPHq39KUIC0uGmVJHQj1BEsCOyiKbZ9rQJg:SbNvkOH73zoCWkjH6KU90uGimj1ieybl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 844fe8dbeac931d0ded94f2862f806c5c7cfa0b7b2d43d43e70b2ea7d96dc164
Files
-
844fe8dbeac931d0ded94f2862f806c5c7cfa0b7b2d43d43e70b2ea7d96dc164.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.l1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.pdata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.didat Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ