Static task
static1
Behavioral task
behavioral1
Sample
43a06d5fb3343e6a5105bd3d5657abb3.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
43a06d5fb3343e6a5105bd3d5657abb3.exe
Resource
win10v2004-20231215-en
General
-
Target
43a06d5fb3343e6a5105bd3d5657abb3
-
Size
160KB
-
MD5
43a06d5fb3343e6a5105bd3d5657abb3
-
SHA1
018d6c5fd7a7d07e8511add8fbbabb22f8547ca0
-
SHA256
3a0408d4de5a553505baa70c2f0de5a4e7f4b85742aa01cc5f573a9cb859a9f9
-
SHA512
5f6a3680201aae5a8e64ad05b18a9469f1b8411792e7c9807c5d6bb4bde626f83c3124f133e0fd103654feb7aca4c04f2556f5dc96c39ab2e397891bf4560723
-
SSDEEP
3072:yt7BpmY9oknHNBcqCIJ6EDZn5IFQ5V5gu3CzxdpqA+FpuFh8s/n:yt7bmEokHP0In5L5fFqdj+i
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 43a06d5fb3343e6a5105bd3d5657abb3
Files
-
43a06d5fb3343e6a5105bd3d5657abb3.exe windows:5 windows x86 arch:x86
6c5183db74a5e5ce04224a615e562755
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
LoadCursorA
GetWindowTextLengthA
IsMenu
CopyRect
DrawIconEx
EndDialog
IsWindow
InsertMenuA
LoadMenuA
AppendMenuW
DrawTextA
DialogBoxParamW
AlignRects
CreateIcon
DrawIcon
GetMenu
GetDlgItem
DrawTextW
DialogBoxParamA
DrawTextA
GetDC
GetWindowTextLengthA
GetDlgItem
CalcMenuBar
BeginPaint
LoadMenuA
DrawTextW
DrawIconEx
GetMenu
AppendMenuW
IsMenu
CopyRect
DialogBoxParamW
CreateIcon
GetFocus
DrawIconEx
CopyIcon
GetWindowTextA
IsMenu
CopyImage
EndDialog
BlockInput
DrawTextW
GetMenu
LoadMenuA
GetWindowTextLengthA
AlignRects
BeginPaint
LoadCursorA
CalcMenuBar
GetWindowTextLengthA
GetMenu
IsMenu
AlignRects
DrawTextA
InsertMenuA
IsWindow
DialogBoxParamA
EndDialog
DrawIcon
GetCursor
LoadCursorA
GetDlgItem
CopyRect
AppendMenuA
DrawTextW
DialogBoxParamW
GetDC
CalcMenuBar
LoadMenuA
GetCursor
DialogBoxParamW
CopyIcon
CreateIcon
DrawTextA
GetDC
IsWindow
InsertMenuA
GetWindowTextLengthA
LoadCursorA
AppendMenuW
AlignRects
GetDlgItem
advapi32
RegDeleteKeyW
RegQueryValueExW
RegQueryInfoKeyW
RegEnumValueA
RegCreateKeyExA
RegDeleteValueW
RegLoadKeyW
RegQueryValueW
RegEnumKeyA
RegReplaceKeyA
RegCreateKeyA
RegFlushKey
RegFlushKey
RegDeleteValueW
RegEnumKeyExA
RegLoadKeyW
RegQueryInfoKeyW
RegCreateKeyA
RegQueryInfoKeyA
RegDeleteKeyW
RegReplaceKeyW
RegCreateKeyExA
RegOpenKeyExA
RegEnumKeyW
RegCreateKeyW
RegOpenKeyExW
RegQueryValueExW
RegEnumValueA
RegQueryValueA
kernel32
FreeResource
CopyFileExA
FindAtomW
GetFileTime
FlushFileBuffers
OpenFile
AddAtomW
ExitProcess
FindClose
GetPriorityClass
GetLocalTime
ReadFile
CopyFileA
WriteFile
DeleteAtom
ExitThread
CreateDirectoryA
CopyFileExW
GetPriorityClass
ReadFile
DeleteFileW
CreateDirectoryA
GetStdHandle
WriteFile
GetFileTime
FindAtomW
ExitProcess
GetCommandLineA
GlobalFree
AddAtomW
FreeResource
GetLocalTime
FatalExit
OpenFileMappingA
ExitThread
FlushFileBuffers
GetCommandLineA
GlobalFree
FlushFileBuffers
ExitProcess
FindAtomA
OpenFileMappingA
FindClose
OpenFile
DeleteAtom
DeleteFileA
GetFileTime
GetLocalTime
FreeResource
FindAtomW
AddAtomA
CreateDirectoryA
CopyFileExW
GetFileType
CopyFileExA
AddAtomW
WriteFile
DeleteFileW
ExitThread
GetCPInfo
DeleteAtom
WriteFile
FatalExit
ExitThread
FindClose
OpenFileMappingA
GetFileType
CopyFileExW
CopyFileExA
FreeResource
GetPriorityClass
GetLastError
FatalExit
OpenFileMappingA
GetPriorityClass
CopyFileExW
OpenFile
GetCommandLineA
GetStdHandle
GetFileTime
AddAtomA
AddAtomW
GetLastError
FindAtomA
DeleteFileW
WriteFile
GetFileType
ExitThread
CopyFileA
ExitProcess
DeleteFileA
Sections
.f9h9 Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.a0gg Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.2ba1 Size: 103KB - Virtual size: 438KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.g7843 Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.d71c Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE