Static task
static1
Behavioral task
behavioral1
Sample
43cbddd9b18a8e2528ffa64eda7ec5c3.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
43cbddd9b18a8e2528ffa64eda7ec5c3.exe
Resource
win10v2004-20231215-en
General
-
Target
43cbddd9b18a8e2528ffa64eda7ec5c3
-
Size
167KB
-
MD5
43cbddd9b18a8e2528ffa64eda7ec5c3
-
SHA1
5824b6f041177330a46345df4ad22839e226e09d
-
SHA256
dd8ac8299aca01bbc1c9c9cfa91d975666fe2b2b7f440fc341c0a1df92843ef9
-
SHA512
fc5dc8e877afd724562430134070f48e35533c46aca4354f965d968b1fdfb3e1d6e3fa0b7305cffc8190e67a698a40cc01f65829b8cc1b2a452f17a379573191
-
SSDEEP
3072:ljCoogYeZEcpONQ2Au9lbB0lrW5q7QiFDcE833a8YPxcUXXWExxJY63y:lj9/7ZlODVlbB0lBAha86NJjy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 43cbddd9b18a8e2528ffa64eda7ec5c3
Files
-
43cbddd9b18a8e2528ffa64eda7ec5c3.exe windows:4 windows x86 arch:x86
361730521f63acc32c3a5c8249d3d804
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
oleacc
LresultFromObject
CreateStdAccessibleObject
kernel32
lstrcpyW
lstrcpyA
OutputDebugStringW
LockResource
lstrlenW
GetTickCount
GetProcessAffinityMask
lstrcpyA
GetACP
EnumResourceNamesW
GlobalAlloc
WideCharToMultiByte
lstrcmpiW
InitializeCriticalSection
FreeEnvironmentStringsW
FindClose
MultiByteToWideChar
GetCPInfo
GlobalFree
GetLastError
GetModuleHandleW
user32
TranslateMessage
GetMessageW
wsprintfW
CharNextW
SetTimer
CharUpperW
GetDC
KillTimer
PostThreadMessageW
SendMessageA
DispatchMessageW
UnregisterClassA
shlwapi
PathCombineW
PathFileExistsW
ole32
CoTaskMemFree
CoRevokeClassObject
CoCreateInstance
CoUninitialize
CoTaskMemRealloc
StringFromGUID2
CoRegisterClassObject
CoInitialize
CoTaskMemAlloc
StringFromCLSID
Sections
.text Size: 102KB - Virtual size: 102KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 61KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.isete Size: 1024B - Virtual size: 376KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ