Static task
static1
Behavioral task
behavioral1
Sample
43fefa658ae516c3eab5d85ab580c1ccf4281ee6a9a63688685ead3022a7967b.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
43fefa658ae516c3eab5d85ab580c1ccf4281ee6a9a63688685ead3022a7967b.exe
Resource
win10v2004-20230221-en
General
-
Target
43fefa658ae516c3eab5d85ab580c1ccf4281ee6a9a63688685ead3022a7967b
-
Size
28KB
-
MD5
40616b42d3e77bdb1dbc80a7548cc20d
-
SHA1
3f85c35b85e3c69db1fee52a5f1d1249a3bfe7fc
-
SHA256
43fefa658ae516c3eab5d85ab580c1ccf4281ee6a9a63688685ead3022a7967b
-
SHA512
1c320729b009422f732e64363ebbf54b32de5bc1738c7f6ee45080ba9b02fa22cfd74eccdc89f33919f9f8432b5bc3c9f04ac81aab452e6648d1ef80ec1f0303
-
SSDEEP
384:zyUlBovrXga95JN2ZA6HSSXj9yOd0lrW:zysobjnNi37RdCrW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 43fefa658ae516c3eab5d85ab580c1ccf4281ee6a9a63688685ead3022a7967b
Files
-
43fefa658ae516c3eab5d85ab580c1ccf4281ee6a9a63688685ead3022a7967b.exe windows x86
b73bde69c70072679dc4d91eaf3bca60
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameW
WideCharToMultiByte
LoadLibraryA
OutputDebugStringA
Sleep
GetProcAddress
WaitForSingleObject
OpenProcess
CreateThread
GetModuleHandleW
user32
LoadCursorW
LoadIconW
RegisterClassW
CreateWindowExW
GetWindowLongW
SetWindowLongW
ShowWindow
UpdateWindow
GetMessageW
TranslateMessage
DispatchMessageW
DestroyWindow
PostQuitMessage
DefWindowProcW
PostMessageW
mfc42u
ord823
ord540
ord2910
ord5568
ord5679
ord4124
ord858
ord800
ord535
ord825
msvcrt
_CxxThrowException
memmove
_exit
_XcptFilter
exit
__p___winitenv
__wgetmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
??1type_info@@UAE@XZ
_controlfp
??0exception@@QAE@ABQBD@Z
??0exception@@QAE@ABV0@@Z
_wtoi
strncpy
_access
atoi
sprintf
wcslen
__CxxFrameHandler
??1exception@@UAE@XZ
msvcp60
?_Grow@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAE_NI_N@Z
?_Eos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXI@Z
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEX_N@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??0logic_error@std@@QAE@ABV01@@Z
??0out_of_range@std@@QAE@ABV01@@Z
??1out_of_range@std@@UAE@XZ
??_7out_of_range@std@@6B@
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_Xran@std@@YAXXZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_C@?1??_Nullstr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@CAPBGXZ@4GB
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
Sections
.text Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 712B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 776B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ