Static task
static1
Behavioral task
behavioral1
Sample
43b4b9a7d5e277fd0d87bde7e057eb65.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
43b4b9a7d5e277fd0d87bde7e057eb65.exe
Resource
win10v2004-20231215-en
General
-
Target
43b4b9a7d5e277fd0d87bde7e057eb65
-
Size
430KB
-
MD5
43b4b9a7d5e277fd0d87bde7e057eb65
-
SHA1
b2285a7558b77c39f2712b6100b2812b19b12316
-
SHA256
8edbdf0e61c74849877beac2e6f8e21ab80b419452be060c5a2ff39202c6ca32
-
SHA512
74d09d695f4aac711ea0939eaff4035ebf9064b226133fc37656eaf867b340662e1d5a9d5a9cba7b391e26ab04635d4e040347880106ffb5a246b3dc2d2d09a9
-
SSDEEP
12288:LPc4uDyPyUuFxXC6v9G4+Y39e58CNer7uqKr+JAwoBscmri:LPcBGu5vTbYHdqy+JhoBTEi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 43b4b9a7d5e277fd0d87bde7e057eb65
Files
-
43b4b9a7d5e277fd0d87bde7e057eb65.exe windows:4 windows x86 arch:x86
9244007a732230550ce53efffdd23d47
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CallWindowProcW
wsprintfW
ScrollWindow
GetWindowModuleFileNameA
DdeAddData
BroadcastSystemMessageW
CharPrevW
GetCursorPos
SetLastErrorEx
CopyRect
HideCaret
GetMenuContextHelpId
IsMenu
RegisterWindowMessageW
SetUserObjectInformationA
EndMenu
GetNextDlgGroupItem
VkKeyScanExW
TranslateMDISysAccel
GetDialogBaseUnits
wininet
UpdateUrlCacheContentPath
FtpGetFileSize
DeleteUrlCacheEntryW
FindNextUrlCacheEntryW
SetUrlCacheGroupAttributeW
InternetSetCookieW
RetrieveUrlCacheEntryFileW
FtpPutFileEx
FindFirstUrlCacheContainerA
InternetQueryDataAvailable
InternetHangUp
UnlockUrlCacheEntryFileW
GopherOpenFileW
InternetDialW
DeleteUrlCacheGroup
comdlg32
ChooseColorW
ChooseFontW
FindTextA
GetSaveFileNameA
GetOpenFileNameW
LoadAlterBitmap
ReplaceTextA
ChooseColorA
ReplaceTextW
PageSetupDlgA
PageSetupDlgW
GetFileTitleA
GetSaveFileNameW
GetOpenFileNameA
ChooseFontA
PrintDlgA
FindTextW
gdi32
CreateDIBPatternBrush
CreateRectRgn
PolyTextOutW
EnumICMProfilesA
PolyPolygon
Polyline
ExtFloodFill
GetDIBits
SetAbortProc
CopyEnhMetaFileA
CreateMetaFileW
ModifyWorldTransform
CloseFigure
CreateEllipticRgn
PolyTextOutA
BitBlt
GetCharABCWidthsFloatW
SetTextColor
GetLayout
RemoveFontResourceW
EnumObjects
RoundRect
GetWorldTransform
SetPixelV
kernel32
RtlUnwind
TlsGetValue
GetTickCount
HeapCreate
FreeLibrary
ExitProcess
GetModuleHandleW
EnumSystemLocalesA
GetCurrentThread
GetDateFormatA
GetStringTypeW
GetStdHandle
HeapReAlloc
HeapDestroy
DeleteCriticalSection
FreeEnvironmentStringsW
GetExitCodeProcess
CreateDirectoryA
GetModuleHandleA
CompareStringA
GetStartupInfoA
SetConsoleActiveScreenBuffer
SetSystemTime
AddAtomA
GetProcAddress
SetHandleCount
lstrcmpi
VirtualAlloc
GetTimeFormatA
GetStartupInfoW
IsValidCodePage
LocalReAlloc
InterlockedExchange
GetLastError
SetConsoleCtrlHandler
GetThreadPriorityBoost
GetCommandLineA
GetCommandLineW
EnterCriticalSection
SetUnhandledExceptionFilter
VirtualFree
HeapAlloc
InterlockedDecrement
HeapFree
WriteFile
GetCurrentThreadId
MultiByteToWideChar
GetLocaleInfoW
IsDebuggerPresent
WriteConsoleOutputW
GetUserDefaultLCID
GetModuleFileNameA
TlsAlloc
GetCurrentProcess
IsValidLocale
GlobalUnlock
WideCharToMultiByte
GetACP
LCMapStringW
CloseHandle
SetLastError
GetCPInfo
InitializeCriticalSectionAndSpinCount
GetConsoleScreenBufferInfo
LeaveCriticalSection
UnhandledExceptionFilter
TerminateProcess
ReadFileEx
SetEnvironmentVariableA
LoadLibraryA
GetOEMCP
CompareStringW
GetLogicalDrives
Sleep
SetEvent
VirtualQuery
GetCurrentProcessId
HeapSize
GetConsoleTitleW
QueryPerformanceCounter
TlsFree
GetModuleFileNameW
GetSystemTimeAsFileTime
GetCompressedFileSizeA
LCMapStringA
GetFileType
GetProcessShutdownParameters
TlsSetValue
GetStringTypeA
SleepEx
GetEnvironmentStringsW
InterlockedIncrement
GetLocaleInfoA
GetTimeZoneInformation
WritePrivateProfileStructW
Sections
.text Size: 139KB - Virtual size: 138KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 277KB - Virtual size: 285KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ