Static task
static1
Behavioral task
behavioral1
Sample
b43ad0221a12d2313f327a61b7c8320f.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b43ad0221a12d2313f327a61b7c8320f.exe
Resource
win10v2004-20240226-en
General
-
Target
b43ad0221a12d2313f327a61b7c8320f
-
Size
326KB
-
MD5
b43ad0221a12d2313f327a61b7c8320f
-
SHA1
dede6b262707bea4073eaf3cce81d94f0b9c5234
-
SHA256
eac364e4aa5026a230437d422622872c6b29659ca7a473f1a768acae51b70be0
-
SHA512
b30d5f0b01775b72ba198e41e38aa667f85e9733ad73c5e66ff8118f90e5c329977a57bf148f79cffcefba9c549fb457bfde76faf90994432e26b17de7c84143
-
SSDEEP
6144:G2dsyQM1lBR3igNsXKQ0ln3b9I2k5K9xJZwoTcXss4+j+g+XyI6evk:GQ5NiosXKQ0BbLmK9xBAss4+j+pX3/vk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b43ad0221a12d2313f327a61b7c8320f
Files
-
b43ad0221a12d2313f327a61b7c8320f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.fwmopuo Size: 310KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.skcqfqq Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kzvfhfd Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RPCrypt Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 511B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE