Static task
static1
Behavioral task
behavioral1
Sample
43fa94dfd7cea17edc8c9421518bed12.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
43fa94dfd7cea17edc8c9421518bed12.exe
Resource
win10v2004-20231215-en
General
-
Target
43fa94dfd7cea17edc8c9421518bed12
-
Size
142KB
-
MD5
43fa94dfd7cea17edc8c9421518bed12
-
SHA1
47958f3a0ca0e525b59f0a967169d19a6de1d266
-
SHA256
91b6aa4f26117e907d5f484ffd429960af941341fd237241137526af878f31b7
-
SHA512
4727860b6897480ef5f91d8443e5c4eecf12b9eb7054e07e991646ed97f26254f6251d6a2394f2ec7c3dc282be32efd4ed3b9e5b70d0b51cb7790b1b2cb03bad
-
SSDEEP
3072:ZWiHOsr/Nvac//EPysvMIoBczu5+b/7cqn:Z0Eh0ysX42zV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 43fa94dfd7cea17edc8c9421518bed12
Files
-
43fa94dfd7cea17edc8c9421518bed12.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 3KB - Virtual size: 216KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 133KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE