Static task
static1
Behavioral task
behavioral1
Sample
43362a5bf6e4e46295b4af3449be5336.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
43362a5bf6e4e46295b4af3449be5336.exe
Resource
win10v2004-20231215-en
General
-
Target
43362a5bf6e4e46295b4af3449be5336
-
Size
136KB
-
MD5
43362a5bf6e4e46295b4af3449be5336
-
SHA1
161f27ec4635eeabbb44e5659c6663eb6e048dde
-
SHA256
08b0b38be107b5a3bb9ab9a8a51a1f6df52b3846282a371d055808f06fb4c668
-
SHA512
5a1c635e64d3cc6509df3badddd917292541c84d4562b7cb19871ffba1f66bee7da855e691390b8aed76b20257a192d2667f08ff46830ee2d4669c46d6a51ade
-
SSDEEP
1536:bl/gRtwm03Z7tjkItGMs5FIYryUywvXggCy7YHGpnC4xBp53FR1ifgqtWhHeT:bl4wrDvtdscmVvX3Cy8HqnC4Fpz1i4H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 43362a5bf6e4e46295b4af3449be5336
Files
-
43362a5bf6e4e46295b4af3449be5336.exe windows:4 windows x86 arch:x86
85b4462705907f1b88bee148b3efa280
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
GlobalAlloc
OpenThread
GetFileTime
CreateFileA
ExitProcess
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetProcAddress
GetModuleHandleA
WriteFile
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
InitializeCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
Sleep
VirtualAlloc
HeapReAlloc
RtlUnwind
HeapSize
MultiByteToWideChar
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
user32
RegisterClassExA
LoadIconA
Sections
.text Size: 48KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 84KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ