Static task
static1
Behavioral task
behavioral1
Sample
43456ee83205c2c9b41c0c94b68fbf89.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
43456ee83205c2c9b41c0c94b68fbf89.exe
Resource
win10v2004-20231215-en
General
-
Target
43456ee83205c2c9b41c0c94b68fbf89
-
Size
166KB
-
MD5
43456ee83205c2c9b41c0c94b68fbf89
-
SHA1
f83c73eeb841c15acf343ec3d16e1147614e7452
-
SHA256
dbcc2f32e250c272fe812ff55ae542bfdf89aa75c32099acfcaf1936eafe5d95
-
SHA512
2759e4be2eda2081a06f4bb8437e2cb0b4ac839ec7b8dc3bd7806685445c7cec05bbbff3bb4fb0a37e546e8840e27a28c6f982910bacc364e2198eef2d3b67b4
-
SSDEEP
3072:Po2luDuBJ3ig8uANv7OArgEojKitXtk/+J42SLuG1ny772YyK:wDSJygxAUArgxJG+JwuG1ny77T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 43456ee83205c2c9b41c0c94b68fbf89
Files
-
43456ee83205c2c9b41c0c94b68fbf89.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 204KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE