AppWndProc
Static task
static1
Behavioral task
behavioral1
Sample
db43447516cb0ab3d151f146ae130990.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
db43447516cb0ab3d151f146ae130990.exe
Resource
win10v2004-20231215-en
General
-
Target
db43447516cb0ab3d151f146ae130990
-
Size
140KB
-
MD5
db43447516cb0ab3d151f146ae130990
-
SHA1
9237ad62579a7766f8d293374e724be1307108b2
-
SHA256
798a11412cd1be076a13054718b8869da714fe11a9f3ae60bc42e8985eddd01b
-
SHA512
7c5be74fb509f5ac2f47a435fe39f2a108733234e37544ae429bbb2a6368b693eff9c787a312363f9f54820205cd8aae7f7d007f2c84ad44219041ad668e4b7d
-
SSDEEP
3072:dNmi8ZtUTB4E8hYDEDcEWaFg5Cs3xZ9AcRvoHa5GsQhwG03bJU:wZtoB44DEjvGCs3x7AcRvl4sQBk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db43447516cb0ab3d151f146ae130990
Files
-
db43447516cb0ab3d151f146ae130990.exe windows:4 windows x86 arch:x86
950f7afe2d260c593c32a44833a4baae
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalHandle
GlobalLock
lstrcpyA
OutputDebugStringA
GlobalFree
GlobalAlloc
GetSystemDirectoryA
lstrcatA
LoadLibraryA
RtlZeroMemory
GlobalUnlock
FreeLibrary
GetModuleHandleA
GetStartupInfoA
GetLastError
HeapAlloc
WriteFile
HeapFree
GetStdHandle
GetFileType
HeapCreate
GetOEMCP
GetACP
SetHandleCount
WideCharToMultiByte
GetEnvironmentStringsW
GetCPInfo
GetEnvironmentStrings
FreeEnvironmentStringsW
GetProcAddress
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
CloseHandle
SetFilePointer
SetStdHandle
FlushFileBuffers
RtlUnwind
GetVersion
GetCommandLineA
ExitProcess
user32
UpdateWindow
LoadStringA
DispatchMessageA
DefWindowProcA
DestroyWindow
PostQuitMessage
TranslateMessage
CheckDlgButton
SetDlgItemTextA
EndDialog
GetDlgItem
EnableWindow
RegisterClassA
LoadIconA
LoadCursorA
GetWindowRect
CreateWindowExA
CreateDialogParamA
ShowWindow
AdjustWindowRect
SetWindowPos
wsprintfA
SendDlgItemMessageA
GetMessageA
advapi32
RegEnumKeyA
RegCloseKey
RegOpenKeyA
RegQueryValueExA
RegSetValueExA
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
comctl32
ord17
Exports
Exports
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 216B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 96KB - Virtual size: 97KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ