Static task
static1
Behavioral task
behavioral1
Sample
2a43e55ce13860e32c80b18ada54b14f1916332a12ff2ee8c13f24433ad0fe9a.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2a43e55ce13860e32c80b18ada54b14f1916332a12ff2ee8c13f24433ad0fe9a.exe
Resource
win10v2004-20240226-en
General
-
Target
2a43e55ce13860e32c80b18ada54b14f1916332a12ff2ee8c13f24433ad0fe9a
-
Size
212KB
-
MD5
e618c425d84015cea8090d5acc54ce39
-
SHA1
82618b01f385160dd528c6b58aecb9009a1cfcab
-
SHA256
2a43e55ce13860e32c80b18ada54b14f1916332a12ff2ee8c13f24433ad0fe9a
-
SHA512
ac8fe72903288e4533306311d052857e4bfdac38ecee96ca788ea75c61624d1c8efe6aa376f6916b0c011bf4d200e67999eef8a28b7da93fc6ce9ed12b7f9467
-
SSDEEP
3072:rBrd1DS8IGjZY02Rqr3+ncAJgDnel6LrUC+KPE7o3j539:pd1m8bYNqrggDnC6LWpS39
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a43e55ce13860e32c80b18ada54b14f1916332a12ff2ee8c13f24433ad0fe9a
Files
-
2a43e55ce13860e32c80b18ada54b14f1916332a12ff2ee8c13f24433ad0fe9a.exe windows:4 windows x86 arch:x86
8eb445d5cef1256ef91ae3ae6d0191bb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
CreatePropertySheetPageA
PropertySheetA
ord17
winmm
mixerGetControlDetailsA
mmioDescend
mmioRead
mmioClose
mmioAscend
mciGetErrorStringA
mciSendCommandA
mmioOpenA
mixerSetControlDetails
mixerGetNumDevs
mixerGetDevCapsA
mixerOpen
mixerGetLineInfoA
mixerGetLineControlsA
mixerClose
timeGetTime
kernel32
SetFilePointer
CloseHandle
CreateFileA
lstrcatA
lstrlenA
ReadFile
Sleep
VirtualFree
GetFileTime
GetSystemInfo
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
LoadLibraryA
SetEndOfFile
LCMapStringA
LCMapStringW
FileTimeToLocalFileTime
FileTimeToDosDateTime
lstrcpyA
OutputDebugStringA
GetLogicalDrives
GetPrivateProfileStringA
GetPrivateProfileIntA
GetDriveTypeA
CreateMutexA
lstrcmpiA
GetOEMCP
GetLastError
VirtualAlloc
HeapReAlloc
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
HeapCreate
IsBadWritePtr
UnhandledExceptionFilter
WriteFile
GetFileType
GetStdHandle
SetHandleCount
GetCurrentProcess
TerminateProcess
HeapAlloc
HeapFree
ExitProcess
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
RtlUnwind
GetProcAddress
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
SetStdHandle
FlushFileBuffers
MultiByteToWideChar
user32
AdjustWindowRectEx
LoadIconA
LoadCursorA
RegisterClassExA
SetRect
GetSystemMetrics
MessageBoxA
UpdateWindow
DestroyWindow
PeekMessageA
TranslateMessage
DispatchMessageA
PostQuitMessage
ShowCursor
LoadStringA
DialogBoxParamA
SendMessageA
DestroyMenu
DefWindowProcA
CheckMenuItem
CheckRadioButton
CheckDlgButton
IsDlgButtonChecked
GetWindowLongA
GetSubMenu
TrackPopupMenu
SetWindowPos
GetParent
SetDlgItemTextA
GetDlgItemTextA
GetDlgItem
EnableWindow
EndDialog
GetWindowRect
GetClientRect
ClientToScreen
MoveWindow
FrameRect
SetWindowLongA
DrawMenuBar
wsprintfA
LoadMenuA
CreateWindowExA
ShowWindow
SendDlgItemMessageA
SetFocus
EnableMenuItem
gdi32
CreateSolidBrush
DeleteObject
SetTextColor
GetTextMetricsA
SelectObject
CreateFontA
SetBkMode
DeleteDC
GetDeviceCaps
CreateICA
TextOutA
GetStockObject
advapi32
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
ddraw
DirectDrawCreate
dsound
DirectSoundCreate
Sections
.text Size: 152KB - Virtual size: 151KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ