Static task
static1
Behavioral task
behavioral1
Sample
c44dbf8e4b8001a1c3f43b71f1b3159d0dec4d76eb57fae52bdd129590128186.exe
Resource
win7-20240903-en
General
-
Target
c44dbf8e4b8001a1c3f43b71f1b3159d0dec4d76eb57fae52bdd129590128186
-
Size
717KB
-
MD5
e71b71d7e0c9936a0ad1b9b0142e007a
-
SHA1
5504d6599293885b23b86366f07920d2f8dfc800
-
SHA256
c44dbf8e4b8001a1c3f43b71f1b3159d0dec4d76eb57fae52bdd129590128186
-
SHA512
27dd6313477fae700493db7aad9c1e34c40b982238ad7d5dd7daf684e2e709348539f5dc3b9c0d7fb5ca35624e2c26e0946b2895a2de93beed569cadb023ce9f
-
SSDEEP
12288:wwRWx7z6EeZvk1cn+lT8q3PCgtHHFFsaAzHohLaA3mL/HVqscXH0J172oS:hRu12vBn+ND3PCg5luzyj4HUtXH0Jh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c44dbf8e4b8001a1c3f43b71f1b3159d0dec4d76eb57fae52bdd129590128186
Files
-
c44dbf8e4b8001a1c3f43b71f1b3159d0dec4d76eb57fae52bdd129590128186.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
L_Y4a9 Size: - Virtual size: 2.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
L_kKk2 Size: 714KB - Virtual size: 716KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE