Static task
static1
Behavioral task
behavioral1
Sample
f43c88dde42df1d6a9bf75826d26f67f0b461a502a1f99efa1877bf15585196d.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
f43c88dde42df1d6a9bf75826d26f67f0b461a502a1f99efa1877bf15585196d.exe
Resource
win10v2004-20240508-en
General
-
Target
f43c88dde42df1d6a9bf75826d26f67f0b461a502a1f99efa1877bf15585196d
-
Size
5.8MB
-
MD5
ba6a88f618446cdf5f119daef0034631
-
SHA1
125dddd81c2f259d925823f59c61fabf5090e585
-
SHA256
f43c88dde42df1d6a9bf75826d26f67f0b461a502a1f99efa1877bf15585196d
-
SHA512
fe054cce905c5fb5b2349a976eb652f9d049722e4915c00efac6a7558860e1c5a5550b7749edc42eeb26961a037372cd8d5386a45526b1388912041cdbd265fd
-
SSDEEP
49152:c7aed1XaLJiX4FC7mXNX8+TZaqdwk0c05HGisvkTHvkT8er4Nc:XedcLJqmXNJYqdwkLcHH469er4N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f43c88dde42df1d6a9bf75826d26f67f0b461a502a1f99efa1877bf15585196d
Files
-
f43c88dde42df1d6a9bf75826d26f67f0b461a502a1f99efa1877bf15585196d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
HFRES0 Size: 3.2MB - Virtual size: 3.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
HFRES1 Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 70KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE