Static task
static1
Behavioral task
behavioral1
Sample
43033efe67af1d8f439193cb92926622.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
43033efe67af1d8f439193cb92926622.exe
Resource
win10v2004-20231215-en
General
-
Target
43033efe67af1d8f439193cb92926622
-
Size
95KB
-
MD5
43033efe67af1d8f439193cb92926622
-
SHA1
c7219b2d2f765e2ff4f3110670fed9a299b161fc
-
SHA256
ec77a89c21bbc512209b8fea6b618e675a4f415a8219587ac2ef4068d5d03cb8
-
SHA512
a616fd7401e0345d7723554a4d5f3dfcc954ef4490ddb29b9d6724b742b81d519ed86b4532ad489aeb2854c288ac1769d13c5aa15cbdebab9569f00e5b29a951
-
SSDEEP
1536:VOMq51snmmHPuT8GTFxh93E7qe6zONe2G278iXURV:81mmc8FxhBEOQjG2IiXUX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 43033efe67af1d8f439193cb92926622
Files
-
43033efe67af1d8f439193cb92926622.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 50KB - Virtual size: 49KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 400B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ