?EnumWindowsProc@@YIHKK@Z
Static task
static1
Behavioral task
behavioral1
Sample
43b9531f6a689e434d3e5fc21d7d0749.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
43b9531f6a689e434d3e5fc21d7d0749.exe
Resource
win10v2004-20231215-en
General
-
Target
43b9531f6a689e434d3e5fc21d7d0749
-
Size
96KB
-
MD5
43b9531f6a689e434d3e5fc21d7d0749
-
SHA1
4426b28d05c56174d7cc343981e51cd340845318
-
SHA256
9c9b95d3f348ec563e4bdf533ee913c82e80ca35b511b1871b2be9d497dbe8fc
-
SHA512
a88587573c86db511dc5d6267880b765d4ff32ff03e45fb596eb961b721c8cc41b40d6abe81d5b50c1a72c0528907e6629a00a540617f87efcf8e4fa90db281e
-
SSDEEP
1536:2VrUzmCJ3J4+PUcgzwVTbTNmVYc+kmMyRoV0fThs6wniUydn5W:mUzmCJ5EcTN+T+VvfVs6wnSBM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 43b9531f6a689e434d3e5fc21d7d0749
Files
-
43b9531f6a689e434d3e5fc21d7d0749.exe windows:4 windows x86 arch:x86
22a78cf6f8b3d4f3e325e26752c6f67b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
ExitProcess
VirtualProtect
GetProcAddress
InterlockedExchange
GetTickCount
ResetEvent
CreateMutexA
VirtualAlloc
GetLastError
GetModuleHandleA
GetSystemTime
GetSystemDirectoryA
GetSystemInfo
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
HeapSize
RtlUnwind
HeapReAlloc
GetStartupInfoA
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
VirtualQuery
user32
SendMessageA
EnableWindow
LoadBitmapA
MessageBoxA
LoadImageW
ShowWindow
PeekMessageA
ole32
CoInitialize
CoCreateInstance
Exports
Exports
Sections
.RIXE2 Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.DTEXT Size: 4KB - Virtual size: 641B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ