Static task
static1
Behavioral task
behavioral1
Sample
43eece9738a5d0525b3dedc1c5e806dc.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
43eece9738a5d0525b3dedc1c5e806dc.exe
Resource
win10v2004-20231222-en
General
-
Target
43eece9738a5d0525b3dedc1c5e806dc
-
Size
686KB
-
MD5
43eece9738a5d0525b3dedc1c5e806dc
-
SHA1
fd3109f30812f90a0fd9d30b7a17c886bb4a9dcf
-
SHA256
d61b82b6f49b9b6c09180994297a92d0d2afb676e855829d0f1cbb0d6a3ff1a6
-
SHA512
a2fbdcb837c4d80ff37ebdf2dce3856521935eda0c798d8bca2d303ccd9e74f09a5c8ff9f7d5f9b57d9241b773edb89c2067d3f4cdd11e8f5aa68a4dbfc9bb5c
-
SSDEEP
12288:+ITW0SsSYpDlta31MUhXjNM3PQ7TxIcntupZB78FsaGIph8N:+ITW0Ss3D7aucXjAPQ7l30pb7wGN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 43eece9738a5d0525b3dedc1c5e806dc
Files
-
43eece9738a5d0525b3dedc1c5e806dc.exe windows:4 windows x86 arch:x86
de39dc68941cc6307e3b2590c857a907
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
user32
wsprintfA
advapi32
RegCloseKey
ole32
OleRun
Sections
BitArts Size: 262KB - Virtual size: 988KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BitArts Size: 512B - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 299KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BitArts Size: 4KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BitArts Size: 302KB - Virtual size: 304KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 68KB - Virtual size: 114KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE