Static task
static1
Behavioral task
behavioral1
Sample
43130985370d76c8d3b3ea6c2cee2e55.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
43130985370d76c8d3b3ea6c2cee2e55.exe
Resource
win10v2004-20231222-en
General
-
Target
43130985370d76c8d3b3ea6c2cee2e55
-
Size
355KB
-
MD5
43130985370d76c8d3b3ea6c2cee2e55
-
SHA1
fb0cac7d2c4e6bf58df6f2fab053eb7c4e9c4c9d
-
SHA256
eb0453754198c3f128a1d86f0ffcc4d5effdc164d63bace0790540266a1bdeea
-
SHA512
5acd6b5637c8d7769c9307a09b76d7d645f21282dde4a60a5ed5849500564b6b23eb92a65fba98ce5243b3793a10aac852ad2fb5bf358d10b685baa1408c5d1f
-
SSDEEP
6144:GKeVYY3Z4fLdLmrvRTLFFPn8qXmvhz0B4ABqrZLGZHs3qw1GCEyn5:GKeVR3Z4fLdarjRnXXiaHANLiHs3qw1T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 43130985370d76c8d3b3ea6c2cee2e55
Files
-
43130985370d76c8d3b3ea6c2cee2e55.exe windows:4 windows x86 arch:x86
e7486454129252b32a59ea90cb57db41
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
user32
CheckMenuItem
DrawTextA
SetWindowPlacement
DrawMenuBar
PostQuitMessage
EqualRect
GetWindowDC
CallWindowProcA
SetMenu
SetTimer
SetScrollInfo
InvalidateRect
GetScrollRange
GetKeyboardLayoutList
EnumWindows
FrameRect
MessageBeep
GetWindowRect
LoadCursorA
GetWindowLongW
ShowOwnedPopups
CreateIcon
RegisterClipboardFormatA
GetPropA
GetKeyNameTextA
DefMDIChildProcA
IsRectEmpty
GetDlgItem
PeekMessageA
WaitMessage
UnregisterClassA
SetRect
SetScrollPos
ShowScrollBar
EnableWindow
FindWindowA
GetMenuItemCount
MapWindowPoints
GetKeyboardType
SetWindowLongA
GetSystemMenu
SendMessageA
GetCursorPos
IsWindowVisible
RemoveMenu
GetKeyboardLayout
IsZoomed
SetWindowPos
DestroyCursor
GetWindowTextA
InsertMenuItemA
SetCursor
CallNextHookEx
RemovePropA
GetMenuState
RedrawWindow
GetKeyboardState
SendMessageW
GetDesktopWindow
SetCapture
GetClassInfoA
IsDialogMessageW
InsertMenuA
ChildWindowFromPoint
GetLastActivePopup
SetWindowTextA
CharToOemA
PostMessageA
SystemParametersInfoA
EnumThreadWindows
GetSysColor
oleaut32
SafeArrayGetElement
RegisterTypeLib
GetErrorInfo
SysStringLen
shell32
DragQueryFileA
msvcrt
log10
memmove
wcsncmp
comctl32
ImageList_Create
ImageList_Read
ImageList_Add
ImageList_DragShowNolock
version
GetFileVersionInfoA
VerInstallFileA
gdi32
GetDIBColorTable
GetObjectA
GetDIBits
shlwapi
PathIsDirectoryA
SHStrDupA
SHQueryValueExA
PathIsContentTypeA
SHQueryInfoKeyA
SHDeleteKeyA
kernel32
GlobalAlloc
VirtualAlloc
GetModuleHandleA
ExitThread
GetCommandLineA
GetCommandLineW
GetVersionExA
GetProcAddress
ExitProcess
IsBadReadPtr
GetLastError
LoadLibraryA
VirtualAllocEx
lstrlenA
Sections
.text Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 289KB - Virtual size: 288KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RSRC9 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RSRC6 Size: 1024B - Virtual size: 691B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RSRC2 Size: 1024B - Virtual size: 959B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RSRC8 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RSRC5 Size: 512B - Virtual size: 291B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RSRC3 Size: 1024B - Virtual size: 751B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 992B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ