Static task
static1
Behavioral task
behavioral1
Sample
43ba68d22d01bef0adea76263a1058d0N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
43ba68d22d01bef0adea76263a1058d0N.exe
Resource
win10v2004-20240802-en
General
-
Target
43ba68d22d01bef0adea76263a1058d0N.exe
-
Size
28KB
-
MD5
43ba68d22d01bef0adea76263a1058d0
-
SHA1
418b2ee2cfb57036af85dd64a39739a343a1f65b
-
SHA256
de182c72c2d8c18c43d27937757a9473b640291fb42aa033c60666bd75c3f02b
-
SHA512
2d2ba223c5570086d02c2a5bb98878f3e3ad39576103364b51b99f8d3957a47d39ca79055dc491beb78cc763f4ff90cc303290c4081aa8b27cee380b0fed698c
-
SSDEEP
384:Vt0Zz+EdtvsGLuQM4A8QkrBPocAhsw/G5M:7WdV44GqPocAhsT5M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 43ba68d22d01bef0adea76263a1058d0N.exe
Files
-
43ba68d22d01bef0adea76263a1058d0N.exe.exe windows:4 windows x86 arch:x86
1e84ffa21ab885469d86810171c6502a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvidctl
GetProxyDllInfo
ole32
StgOpenStorage
kernel32
RaiseException
HeapSetInformation
GetCurrentProcess
UnhandledExceptionFilter
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
InterlockedCompareExchange
InterlockedExchange
Sleep
TerminateProcess
advapi32
CredFree
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 712B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ