Static task
static1
Behavioral task
behavioral1
Sample
643845932aa22ada5c8e26aaed8ea868.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
643845932aa22ada5c8e26aaed8ea868.exe
Resource
win10v2004-20231215-en
General
-
Target
643845932aa22ada5c8e26aaed8ea868
-
Size
336KB
-
MD5
643845932aa22ada5c8e26aaed8ea868
-
SHA1
9df0e728c2fecd19deb330fa3af41bf0e354ffc4
-
SHA256
32f725b54f87f82f888da6db8bbc6636ccd9015a005d77527d680e994a131e75
-
SHA512
b7cbf8a3853f70337c0d1ae8b7221cd01e6f21a46a87af4bd31230e9f40aa449efc583f8f26732192308c98b1303714c8e5f34e330a2a4db4d7ff7318a880c07
-
SSDEEP
6144:ppArKmVeNv6LfjCGga+E7bUzDFKidqkKKNVPUl8F/2kZL3g+avhRFDLMY9Q:pGrKm2oLDHAD5dqkh5F0+OXFDL9Q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 643845932aa22ada5c8e26aaed8ea868
Files
-
643845932aa22ada5c8e26aaed8ea868.exe windows:4 windows x86 arch:x86
91ae596c98f390934aa8d976311d550d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetSystemMetrics
SendDlgItemMessageW
KillTimer
ChangeDisplaySettingsW
RedrawWindow
SetUserObjectSecurity
SetUserObjectInformationW
ClientToScreen
DlgDirListW
GetClipboardSequenceNumber
RegisterClassExA
ChildWindowFromPointEx
RegisterWindowMessageA
DestroyWindow
EmptyClipboard
VkKeyScanExA
GetClientRect
DefWindowProcA
SetWindowsHookExW
ShowWindow
OpenDesktopW
FlashWindow
DlgDirSelectExW
DdeGetData
SetDlgItemInt
FrameRect
GetClassNameA
GetOpenClipboardWindow
GetClipboardFormatNameA
SetWindowsHookExA
GetIconInfo
EnumWindows
CharToOemBuffW
IsDialogMessage
IsRectEmpty
CreateWindowStationW
ChangeMenuA
PeekMessageA
SetMenuContextHelpId
RegisterClassA
GetLastActivePopup
SetWindowTextA
LoadImageA
MonitorFromWindow
OpenWindowStationA
TrackPopupMenu
CharUpperA
MessageBoxA
DrawIcon
EnumDisplayDevicesW
CascadeWindows
DdeSetUserHandle
DdeQueryConvInfo
CharLowerW
CreateWindowExW
IsClipboardFormatAvailable
comctl32
ImageList_GetIconSize
ImageList_LoadImageA
ImageList_Create
ImageList_BeginDrag
CreateToolbar
ImageList_Copy
DestroyPropertySheetPage
DrawInsert
CreatePropertySheetPage
CreateToolbarEx
ImageList_SetImageCount
ImageList_GetImageInfo
ImageList_DragEnter
InitMUILanguage
ImageList_GetImageRect
ImageList_Read
ImageList_DragLeave
ImageList_DragShowNolock
ImageList_LoadImage
InitCommonControlsEx
kernel32
LCMapStringW
GetModuleHandleA
FindResourceA
SetConsoleTitleA
ResetEvent
InterlockedIncrement
FreeLibrary
VirtualFree
ReleaseMutex
GetConsoleMode
GetStdHandle
RtlUnwind
CloseHandle
InterlockedCompareExchange
IsValidCodePage
GetUserDefaultLangID
GetEnvironmentStringsW
GetTickCount
CreateToolhelp32Snapshot
LeaveCriticalSection
GetLocalTime
OpenSemaphoreA
ContinueDebugEvent
GetEnvironmentStringsA
GetCommandLineA
GetTimeFormatA
DeleteAtom
ExitProcess
lstrcmpi
WaitForMultipleObjects
MoveFileA
SetHandleCount
GetProcessAffinityMask
GetProcessHeap
SetConsoleCP
VirtualQuery
GetLastError
GetTimeZoneInformation
TlsFree
ReadConsoleOutputCharacterA
ReadConsoleInputA
HeapSize
WaitForDebugEvent
ReadFile
GetExitCodeThread
LocalUnlock
InitializeCriticalSection
EnterCriticalSection
GetTimeFormatW
GetStartupInfoA
MultiByteToWideChar
CreateThread
OpenFileMappingW
EnumDateFormatsW
GetConsoleOutputCP
Sleep
HeapValidate
LCMapStringA
GetOEMCP
FindFirstFileExW
OpenMutexA
UnlockFileEx
MapViewOfFileEx
GetThreadPriority
GetProfileIntW
SetConsoleCtrlHandler
SetStdHandle
GlobalFix
GetCurrentProcessId
WritePrivateProfileStructW
FindAtomW
GetVersionExA
GetEnvironmentVariableW
LockFile
SetEnvironmentVariableW
GetDateFormatA
MoveFileW
HeapCreate
GetStringTypeW
UnhandledExceptionFilter
OutputDebugStringA
TlsAlloc
IsValidLocale
EnumSystemCodePagesW
SetLastError
CreateMutexA
TlsSetValue
CreateSemaphoreA
GetLongPathNameW
FoldStringW
WaitForSingleObjectEx
TlsGetValue
FreeEnvironmentStringsA
WriteConsoleA
MoveFileExW
GetFullPathNameW
SetEnvironmentVariableA
IsBadReadPtr
VirtualUnlock
GetSystemDefaultLCID
HeapAlloc
SetFilePointer
AddAtomW
GetFileType
LoadLibraryA
GetLocaleInfoW
WriteConsoleOutputCharacterA
WriteConsoleW
GetLongPathNameA
WriteFile
FreeEnvironmentStringsW
GetModuleFileNameA
lstrcmpiA
CreateFileA
GetSystemDirectoryA
GetProcAddress
GetCPInfo
GetSystemTimeAsFileTime
GetCurrentProcess
GlobalFree
lstrcmpA
FlushFileBuffers
GetLocaleInfoA
GetTempPathW
InterlockedExchange
GetConsoleCP
GetLogicalDriveStringsA
IsDebuggerPresent
WideCharToMultiByte
GetEnvironmentStrings
CompareStringA
DosDateTimeToFileTime
VirtualAlloc
SetCurrentDirectoryA
GetACP
DeleteCriticalSection
QueryPerformanceCounter
TerminateProcess
lstrcpyA
SetConsoleScreenBufferSize
EnumSystemLocalesA
GetCurrentThread
HeapFree
GetFileTime
GetThreadPriorityBoost
GetStringTypeA
WritePrivateProfileSectionW
HeapReAlloc
GlobalFindAtomA
FindNextFileW
GetCurrentThreadId
GetUserDefaultLCID
InterlockedDecrement
CompareStringW
SetUnhandledExceptionFilter
GetModuleHandleW
HeapDestroy
Sections
.text Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 72KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 96KB - Virtual size: 109KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ