Static task
static1
Behavioral task
behavioral1
Sample
43a5ad927899b9aa21e7b5229d061f30.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
43a5ad927899b9aa21e7b5229d061f30.exe
Resource
win10v2004-20231215-en
General
-
Target
43a5ad927899b9aa21e7b5229d061f30
-
Size
948KB
-
MD5
43a5ad927899b9aa21e7b5229d061f30
-
SHA1
c0610cb669ac68190c1442c4cee92fd7a546977c
-
SHA256
791df019a39f9a51515a8b8be29ad017958b95e2e5255583839a89cf8d605727
-
SHA512
823d6bd3861e173a155b9ab110d3c94520a22e78208c5ef45e7eead945941a8d937b99b4858e4eb82362dbddd417059c3e146b9b0e42005b6f7300e0c3ff21a3
-
SSDEEP
24576:IIx9U0nCmOWkJ0uAxYeHBoYpOCe8fE0MaZk52P5mq:IIx9U/mC0uxMU8xZC52P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 43a5ad927899b9aa21e7b5229d061f30
Files
-
43a5ad927899b9aa21e7b5229d061f30.exe windows:5 windows x86 arch:x86
cc1a505b9646395cf48b99045c484e28
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wintrust
WTHelperProvDataFromStateData
WTHelperGetProvSignerFromChain
WinVerifyTrustEx
userenv
UnloadUserProfile
urlmon
CoInternetGetSession
CreateURLMoniker
CreateAsyncBindCtx
uxtheme
SetWindowTheme
sensapi
IsNetworkAlive
crypt32
CertVerifyCertificateChainPolicy
CryptStringToBinaryW
CryptBinaryToStringW
wininet
InternetCreateUrlW
InternetCrackUrlW
InternetCombineUrlW
secur32
GetUserNameExW
gdi32
SetBkMode
BitBlt
DeleteDC
CreatePen
GetClipRgn
SaveDC
CreateCompatibleBitmap
RestoreDC
CreateRectRgn
GetObjectW
CreateFontIndirectW
SelectObject
GetTextMetricsW
CreateCompatibleDC
Rectangle
ExcludeClipRect
SetLayout
IntersectClipRect
GetStockObject
SetTextColor
SetBkColor
CreateSolidBrush
DeleteObject
kernel32
OpenFileMappingW
SetFilePointerEx
GetFileSizeEx
GetFileAttributesExW
FreeLibraryAndExitThread
DuplicateHandle
InitializeCriticalSectionAndSpinCount
GetSystemTime
SystemTimeToFileTime
GetExitCodeProcess
GlobalFree
CreateWaitableTimerW
WaitForMultipleObjects
GetExitCodeThread
SetWaitableTimer
TerminateThread
GetComputerNameW
LoadLibraryW
CopyFileW
CompareFileTime
GetVersionExW
GlobalMemoryStatusEx
GetSystemDefaultUILanguage
GetSystemDefaultLCID
GetComputerNameExW
GetEnvironmentVariableW
CreateProcessW
lstrlenA
OpenProcess
GetTempPathA
GetFullPathNameA
DeleteFileA
SetFilePointer
CreateFileA
GetFileInformationByHandle
FileTimeToLocalFileTime
FileTimeToDosDateTime
GetFileAttributesA
GetTempPathW
GetLocalTime
GetFullPathNameW
ReadFile
QueueUserWorkItem
MulDiv
GetUserDefaultLangID
QueueUserAPC
InterlockedCompareExchange
GetFileSize
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
ResetEvent
ReleaseSemaphore
CreateSemaphoreW
CreateEventW
SetEvent
CreateMutexW
OpenMutexW
LocalAlloc
SetFileAttributesW
RemoveDirectoryW
MoveFileExW
GetFileAttributesW
CreateDirectoryW
GetPrivateProfileStringW
WaitForSingleObject
ReleaseMutex
FlushFileBuffers
WritePrivateProfileStringW
CreateFileW
DeviceIoControl
CloseHandle
DeleteFileW
GetTempFileNameW
FindNextFileW
FindFirstFileW
FindClose
GetLongPathNameW
FileTimeToSystemTime
SetThreadPriority
EnumResourceNamesW
GetSystemInfo
VerifyVersionInfoW
ExpandEnvironmentStringsW
FindResourceExW
CompareStringA
GetStringTypeW
GetStringTypeA
LoadLibraryA
HeapSize
Sleep
VirtualAlloc
IsDebuggerPresent
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
LCMapStringW
WideCharToMultiByte
LCMapStringA
GetOEMCP
GetCPInfo
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
HeapDestroy
GetCurrentThread
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
WriteConsoleW
GetFileType
SetHandleCount
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetModuleFileNameA
GetStdHandle
GetThreadPriority
ExitThread
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
CreateThread
GetStartupInfoA
LockResource
CompareStringW
GetModuleHandleW
FindResourceW
LoadResource
SizeofResource
MultiByteToWideChar
HeapSetInformation
GetModuleFileNameW
LoadLibraryExW
lstrcmpiW
InterlockedIncrement
LeaveCriticalSection
EnterCriticalSection
lstrlenW
FreeLibrary
FormatMessageW
GetLastError
LocalFree
InterlockedDecrement
DeleteCriticalSection
InitializeCriticalSection
RaiseException
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoW
HeapReAlloc
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
user32
DefDlgProcW
RegisterWindowMessageW
EnumChildWindows
CreateDialogIndirectParamW
GetClassLongW
TrackMouseEvent
GetFocus
RegisterClassExW
GetScrollInfo
SetScrollInfo
IntersectRect
InvalidateRect
PtInRect
UpdateWindow
IsWindowEnabled
KillTimer
GetKeyState
GetNextDlgTabItem
CreateAcceleratorTableW
GetMessageW
TranslateAcceleratorW
IsDialogMessageW
DestroyAcceleratorTable
GetLayeredWindowAttributes
SetLayeredWindowAttributes
EnableWindow
LoadCursorW
SetCursor
PostMessageW
DefWindowProcW
IsWindowVisible
ShowWindow
GetWindowTextLengthW
GetWindowTextW
GetClassNameW
GetDesktopWindow
IsWindow
DrawIconEx
CopyRect
GetSysColor
MessageBoxIndirectW
BeginPaint
EndPaint
RedrawWindow
MessageBeep
SetWindowLongW
SetWindowTextW
FillRect
InflateRect
AdjustWindowRectEx
SetWindowPos
GetSystemMetrics
DrawTextW
LoadIconW
MapWindowPoints
ScreenToClient
WindowFromPoint
GetDCEx
SetWindowRgn
GetWindowThreadProcessId
GetShellWindow
PostThreadMessageW
MsgWaitForMultipleObjects
GetSystemMenu
EnableMenuItem
CreateWindowExW
GetWindowLongW
SetRect
DestroyWindow
LoadStringW
SetFocus
SendMessageW
ReleaseDC
GetDC
PostQuitMessage
SetProcessDefaultLayout
EndDialog
GetWindowRect
SystemParametersInfoW
DialogBoxIndirectParamW
CharNextW
NotifyWinEvent
GetClientRect
GetParent
MsgWaitForMultipleObjectsEx
TranslateMessage
DispatchMessageW
PeekMessageW
UnregisterClassA
msacm32
acmDriverClose
acmDriverAddA
acmDriverOpen
ntdll
RtlUnwind
VerSetConditionMask
Sections
.text Size: 498KB - Virtual size: 498KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 415KB - Virtual size: 415KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 24KB - Virtual size: 3.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ