L��W��Un�c�����J�]�j=�c���_3g���ιk��6�0`%�,wJU9�sH�t�o��&��z��m�!%!��� ���$�03�)<۽��Ps`���p ���.Ħ�I& �<��G>����~#�\�t>��y��ݯz�$#Qt��$�l��ʫ�Mp���~sU�vx��_�Ԣ�_���o���y�\���7�H���bz��79�� (���B��>����sw}|ۡp����pb�g�vD���ä!�9��5<���{��̩ɱ�X�i{�m���N7 ٺ)����(�-��d*�1��A�2�A�'�論E�.�g�N�wn�w?����r�5� � �%�d~��!����� E�n,��h^'���]#5r07�����ʳq���@��rJ�=e����0�/"oRV��>"+{���gm�}ٵ~�p�N��^*;^A��hVi�Q�nf�>w�h`j:��!�?�ܤ����e�X��]oO�0��y�Te ���i��i0.k��o6�Ak>h?��� �����d�؟�� ��F���*��y���T��������������4��������6���� �C��s���~(�� �]Uu@�&�6�_�t�G�h��EC��8h�x�6���v.wu��$%C憢q�nS���,Ŀ���b),����Ɛ3 ty��iR��4u����8U��٧]�I�l�3�hTsUx�a$��*=�HF������L�ܪ5�X�~�����E�v���4���2��i���i��*�l*^3mM6�T�+֊��Ta�]��P��i��K�u���#��n�d\%�@����,����#Q�Ά���#zK��� �����$г��b�5�)��N�̠"�AjgA-��7(~#�n�<�̪'rMI���kGLL�(�"d/9A'0�A}X�xOi���[g'@1f:�{$j�VA�P��z՜� z��j�¿y"� ccu�{���%�;�K��|��Ϲļp�F�P�P�@�*�Gմ�I�բp ���O��K�8��F��V�� ����ׁ��{e�Y(t�����+�3s n���' ̡ �@��v��^n�N��%k�)�v(�&��&��k7&T�6�pA��v�a�����8`C��mB\�כ���^�������(� [~���~�E�m�n���y�(!�sO ڡ�������+1�p�6��ܮ�j����V-���{|�ڂ`B���E�A|4 ���N�E]ƭ�(=�W�^�/�Z�����G��?r�^��etK�g��a3�&�y��ZKQg}>����H3b�*+� {��`s\�ܡy��:M�;3�7l�9J��CǝZ�@�-��Ɔ�R��Зq��v�'�C��?`��؞I"�Cɣ�з<��T�q�86BͨPp�p�3�K�65̤�i�p�\�r��šj���~����a�Yu���x3KaQ��RFH�JN+�N�+U=S�Q��D��c9�kMkjC�Tu�j��H�0��CLVnM�`��� �nQ����.��*}��aãd��@9���r�{<��)��ר/�����������V�-:)t�0��X��H�g ��4j��t ƃ��iȞ�����H뎪 �f4p�;�7ə'rR ��Q4X&��Ƒ�����i2�ss=%}���-`˞��A�K�]���!����i�I,��;���崻�ݘdE�?�D�X��=.hZ�Op������ ��ꩽ�^(#m� ��7{xV�l N|�F���[���`�q���YHn�ު�{h����9Ewx͇� �1��O�� �,x[��5^��K��v�V9`�G.��1�6h�|B��������������D~���M�{U#��z���V���y�9�WI"�j��)���F֨e(��$b˦-��>�m���+�є �1�{=t��pE�N�2���b�0��QU`8K����cJ��1,� >%(����o2�� �=����i��2{���^��S<n@g��n�����F��fC� �ƚ�Y� �}��p�2�FU��r�"ߒm��.ڷpz�����u�oT�A�Ҋ�`�Ҟ��pߪ������d 1�L! m��w#-�P�+�9�VW���ཻ�8;�� �Ɇ��ЕK�H�.��Eܺ�/VP� 6�jwBJkѾ!��k}�U�O9Թ�tQ������$y0�m��։`d*�|AA�� z尔O|#TZPDpLr�M O�C&}�j'�HIߵ�h�'F�+��$����Ζ���B��zi�Q&�u�W�t��Ȼoa"r��])e�֛��뫭��4�*W2�~�\:Xc$�Z`�S��0Y&���k��3Χ����s|ϻ<����U�PCd/����^�ɯ�� �\���v�(r��H� �jr�bx�вk�~�+ye��`xP/����G�dR��zD1M�_rL8��=��}z�1DA�ƈA����^Յ�*�� �\MH!A��c+1�9s˔ŗ�Ub٤\��Gs!`��c�����ҳ�\�C\�����-rU�� B$D��� �55���������<-e�$/�%����q�K,���S| �~���[���0 ���8�P� 1\n���� ����ȅ�������ܪ5�-`,�Z\V&Tq���)AT\��t�c:}-����5�O�%J�$K��ly�ܥ��G��?J4=��7�V$���t�62������W�M�ɍ\lu�ZL=���.�2�����O�MB�;�[�y�p�]�8����띀Ϝ�-D��/�Y�<`�F�����f Q+k�U#��?+�zu��n��͜���B��kL��$}']�A��n-�Y.O�o=b���gS ��o�ד�f����(�Ƅ0�ܻc�T�:/SӥY�}�O&�8ѦllH�U�wl��k��OͶN���՜{}�E�?����n����Ü�}%�������O!8��r����*r�/d�A��X��"���8Q`�l��~�F���k/?)�fFn�ChG��(yY�����Q����g�&�Tgd���//:��-���q�T �mb���5���k��
Static task
static1
Behavioral task
behavioral1
Sample
43a69f7a8a088810a999b12d2168eb64.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
43a69f7a8a088810a999b12d2168eb64.dll
Resource
win10v2004-20231215-en
General
-
Target
43a69f7a8a088810a999b12d2168eb64
-
Size
209KB
-
MD5
43a69f7a8a088810a999b12d2168eb64
-
SHA1
d900094e897ac75ddd913bf236437f1eb352cfc4
-
SHA256
9dab7bc1b123e42b0a2466241587273e058606a2721a5d10bb39fa8bbc35bde1
-
SHA512
ff802684df1989da3c7175d3126c0fb566d0b2fa7bdc07295b41da899046213b75a0c41589357d9f41d10aeedd2d4f6247f190e398f12bd679c3f374add26ccf
-
SSDEEP
6144:M7agZWfer/vv6Qz2c0rjJzoP+j5Zh+wCM/C1C:M71HzM92+j5z+ww1C
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 43a69f7a8a088810a999b12d2168eb64
Files
-
43a69f7a8a088810a999b12d2168eb64.dll windows:4 windows x86 arch:x86
252c5318592975877266ce7d667310f0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetCommandLineA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
FindWindowA
gdi32
SetBkColor
advapi32
RegOpenKeyA
Exports
Exports
Sections
.text Size: - Virtual size: 163KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sxdata Size: - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vv.vvvmp Size: - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vv.vvvmp Size: 207KB - Virtual size: 207KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 332B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ