CVE-2024-38143 poc[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

CVE-2024-38143 poc.exe
Size

5.7MB
MD5

0c5a47d387a5ec1bdb9b4bcbef89dc79
SHA1

fd9117fa7b4a12875655ae574ff207fa1a0e3aa8
SHA256

0dfa551e2b12af0991714a3e5be26c9a4c00f7663f065dbf4d8b84c9abc7b97a
SHA512

83e30e70dadfe9912d1db174c9af82a48a7a2ae73b5ac8c8147720a47934c66af439a3455d72aa54a30642b979e023c2ef924acd35482a11e662e81567f3bfaa
SSDEEP

98304:cdkyIAYt3VXweTkquPhO881Vv2LDdLAGa8okC0HvIz1inN1aK+fno1TGDjZ:AkVLXwcucUAG+Dz1iNQKio1El

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
CVE-2024-38143 poc.exe

Files

CVE-2024-38143 poc.exe
.exe windows:5 windows x86 arch:x86

a81994a8e54b90ebc57ddfe905d7f15e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

gdiplus

GdipGetImageWidth
GdipGetImageHeight
GdipCloneImage
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipCreateBitmapFromStream
GdipCreateBitmapFromStreamICM
GdipCreateFromHDC
GdipFree
GdipDisposeImage
GdipCreateBitmapFromGdiDib
GdipDeleteGraphics
GdipCreateHBITMAPFromBitmap
GdipLoadImageFromStreamICM
GdipLoadImageFromStream
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipSaveImageToFile
GdiplusShutdown
GdiplusStartup
GdipDrawImageRectI
GdipFillRectangleI
GdipCreateBitmapFromScan0
GdipImageSelectActiveFrame
GdipImageGetFrameCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameDimensionsCount
GdipGetImagePixelFormat
GdipGetImageRawFormat
GdipGetImageGraphicsContext
GdipCreateSolidFill
GdipDeleteBrush
GdipCloneBrush
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromFile
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipDrawImageRectRect
GdipReleaseDC
GdipAlloc

kernel32

VirtualFree
FreeLibrary
GetModuleFileNameW
GetProcAddress
LoadLibraryW
SetThreadAffinityMask
GetDateFormatW
GetTimeFormatW
CompareStringW
MultiByteToWideChar
WideCharToMultiByte
GetLocaleInfoW
GetNumberFormatW
GetCurrencyFormatW
EnumCalendarInfoExW
EnumDateFormatsExW
GetSystemDefaultLCID
GetUserDefaultLCID
GetModuleHandleW
LockResource
HeapDestroy
HeapSize
GetProcessHeap
GetCurrentProcessId
DeleteCriticalSection
LoadResource
SizeofResource
FindResourceW
FindResourceExW
GetPrivateProfileIntW
GlobalAlloc
GlobalLock
GlobalUnlock
FileTimeToSystemTime
InitializeCriticalSection
WaitForMultipleObjects
GetFileTime
FindFirstChangeNotificationW
FindNextChangeNotification
FindCloseChangeNotification
FreeResource
FindClose
SetFileTime
TzSpecificLocalTimeToSystemTime
GetTimeZoneInformation
SystemTimeToFileTime
lstrlenW
FindFirstFileW
FindNextFileW
GetVersion
GetShortPathNameW
GetLongPathNameW
GetFileSizeEx
GetTempPathW
RemoveDirectoryW
GetFileAttributesExW
DeleteFileW
QueryPerformanceCounter
QueryPerformanceFrequency
GetVersionExW
InterlockedExchange
InterlockedCompareExchange
LocalFree
GetCurrentProcess
GetCurrentThreadId
GetSystemTime
GetWindowsDirectoryW
VirtualAlloc
GlobalFree
GetFileSize
ReadFile
GetFileAttributesA
DeleteFileA
MulDiv
WriteFile
MoveFileW
OutputDebugStringW
InterlockedDecrement
lstrcmpiW
GetSystemWindowsDirectoryW
lstrcmpA
lstrcmpiA
SetEndOfFile
SetFilePointer
GetLocalTime
GetThreadLocale
FormatMessageW
CreateDirectoryW
CopyFileW
GetCommandLineW
ExpandEnvironmentStringsW
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileSectionW
CreateProcessW
SystemTimeToTzSpecificLocalTime
MoveFileExW
TlsAlloc
SwitchToThread
IsProcessorFeaturePresent
FlushInstructionCache
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
IsDebuggerPresent
VirtualQuery
GetNativeSystemInfo
GetSystemDirectoryW
TlsSetValue
TlsFree
LCMapStringW
GetTickCount
GetSystemTimeAsFileTime
GetStringTypeW
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
LocalFileTimeToFileTime
CreateFileA
SetFilePointerEx
HeapLock
HeapUnlock
HeapWalk
OpenThread
ReleaseMutex
RtlUnwind
InterlockedFlushSList
ExitProcess
GetModuleHandleExW
CreateThread
ExitThread
ResumeThread
FreeLibraryAndExitThread
GetACP
GetCommandLineA
GetSystemInfo
GetThreadTimes
TerminateProcess
GetProcessTimes
CreateWaitableTimerW
CreateSemaphoreW
Sleep
CreateEventW
CreateEventA
CreateMutexW
CreateMutexA
WaitForSingleObjectEx
WaitForSingleObject
ResetEvent
SetEvent
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
CancelIo
DeviceIoControl
TlsGetValue
HeapFree
HeapReAlloc
HeapAlloc
SetErrorMode
SetLastError
GetLastError
RaiseException
CloseHandle
AreFileApisANSI
GetVolumePathNamesForVolumeNameW
GetVolumeNameForVolumeMountPointW
GetFullPathNameW
GetFileAttributesW
CreateFileW
GetStdHandle
GetCurrentThread
GetConsoleCP
GetConsoleMode
VirtualProtect
GetFileType
IsValidLocale
EnumSystemLocalesW
ReadConsoleW
FlushFileBuffers
IsValidCodePage
GetOEMCP
SetStdHandle
WriteConsoleW
SetConsoleCtrlHandler
FindFirstFileExA
FindFirstFileExW
FindNextFileA
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetEnvironmentVariableW
OutputDebugStringA
ReleaseSemaphore
SignalObjectAndWait
CreateSemaphoreA
GetModuleFileNameA
TryEnterCriticalSection
HeapQueryInformation
SetThreadPriority
GetThreadPriority
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetProcessAffinityMask
RegisterWaitForSingleObject
UnregisterWait
GetModuleHandleA
SetProcessAffinityMask
DuplicateHandle
QueryDepthSList
UnregisterWaitEx
CreateTimerQueue
WaitForMultipleObjectsEx
InterlockedIncrement
RtlCaptureStackBackTrace

user32

MapWindowPoints
GetWindowRect
SetWindowTextW
TrackPopupMenu
GetParent
SetWindowPos
LoadCursorW
SetWindowLongW
GetWindowLongW
PtInRect
CopyRect
FillRect
GetWindow
LoadImageW
MonitorFromWindow
GetMonitorInfoW
InflateRect
GetMenuStringW
GetSubMenu
GetMenuItemID
GetMenuItemCount
AppendMenuW
DeleteMenu
SetMenuItemInfoW
OffsetRect
CharLowerBuffW
EqualRect
SendMessageTimeoutW
UnregisterClassW
DestroyWindow
CharNextW
ShowCursor
EnumWindows
SetFocus
EnableWindow
EnumDisplayMonitors
SetCapture
ScreenToClient
GetCursorPos
SetCursor
GetClientRect
GetWindowTextW
InvalidateRect
ReleaseDC
GetDC
DrawTextW
GetSystemMetrics
GetDlgItem
CallWindowProcW
ReleaseCapture
BeginPaint
EndPaint
IsWindowVisible
CreateWindowExW
ShowWindow
SetPropW
GetPropW
RemovePropW
GetSysColor
MonitorFromPoint
SetTimer
KillTimer
SetCursorPos
ClientToScreen
UpdateWindow
LoadMenuW
DestroyMenu
CheckMenuItem
MoveWindow
PeekMessageW
AttachThreadInput
GetWindowPlacement
SetWindowPlacement
IsZoomed
IsClipboardFormatAvailable
IsWindowEnabled
DefWindowProcW
TrackMouseEvent
GetForegroundWindow
SetForegroundWindow
EndDialog
EnableMenuItem
SetClassLongW
GetKeyState
PostMessageW
SystemParametersInfoW
EmptyClipboard
GetClipboardData
SetClipboardData
CloseClipboard
OpenClipboard
IsWindow
SendMessageW
MessageBoxW
GetActiveWindow
IsRectEmpty
IntersectRect
GetWindowThreadProcessId
DialogBoxParamW

gdi32

SelectClipRgn
ExtCreatePen
SetROP2
ExtSelectClipRgn
ExcludeClipRect
CreateRectRgn
BitBlt
TextOutW
GetTextExtentPoint32W
CreateCompatibleDC
CreateCompatibleBitmap
MoveToEx
LineTo
GetObjectW
EndPage
StartPage
EndDoc
StartDocW
StretchDIBits
ExtTextOutW
SetMapMode
CreateSolidBrush
DeleteDC
DeleteObject
SelectObject
SetBkMode
SetTextColor
GetTextMetricsW
CreateFontW
CreateFontIndirectW
GetDeviceCaps
GetStockObject
Rectangle
SetDIBitsToDevice
GetTextFaceW
DPtoLP
CreateDCW
CreatePen
SetBkColor
IntersectClipRect

winspool.drv

DeviceCapabilitiesW

comdlg32

PrintDlgExW
GetOpenFileNameW
GetSaveFileNameW

advapi32

FreeSid
RevertToSelf
RegCloseKey
RegCreateKeyExA
RegCreateKeyExW
RegQueryInfoKeyW
RegEnumKeyExW
ConvertSidToStringSidW
LookupAccountNameW
RegSetKeySecurity
RegGetKeySecurity
GetSecurityDescriptorDacl
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
AddAccessAllowedAce
GetAce
AddAce
GetAclInformation
InitializeAcl
RegDeleteKeyA
AllocateAndInitializeSid
RegSetValueExW
RegSetValueExA
RegQueryValueExW
RegQueryValueExA
RegOpenKeyExW
RegOpenKeyExA
RegDeleteValueW
RegDeleteValueA
RegDeleteKeyW
ImpersonateSelf

shell32

ShellExecuteW
ord102
SHCreateDirectoryExW
SHGetDesktopFolder
ord232
SHFileOperationW
SHGetFolderPathW
ord17
ord16
ord155
ord18
DragQueryFileW
ord165
SHChangeNotify
SHGetSpecialFolderPathW
DragFinish
SHGetFolderLocation
DragAcceptFiles

ole32

CoTaskMemFree
CreateStreamOnHGlobal
CoCreateInstance
CoInitialize
CoTaskMemAlloc
CoTaskMemRealloc
CoInitializeEx
CoInitializeSecurity
CoSetProxyBlanket
CoUninitialize

oleaut32

VariantInit
VariantClear
VarUI4FromStr
SysAllocString
SysFreeString

shlwapi

SHQueryValueExA
SHDeleteKeyW
SHDeleteKeyA
SHQueryValueExW
SHCopyKeyA
SHCopyKeyW
PathAppendW
PathCombineW
PathFileExistsW
PathRemoveFileSpecW
SHGetValueW
StrCmpLogicalW
PathAddBackslashW
PathFindExtensionW
StrToIntExW
SHGetValueA
PathIsDirectoryW
PathFindFileNameW

ws2_32

WSASetLastError
select
htonl
ntohs
__WSAFDIsSet

version

GetFileVersionInfoSizeA
GetFileVersionInfoSizeW
GetFileVersionInfoA
VerQueryValueW
GetFileVersionInfoW

psapi

EnumProcessModules
EnumPageFilesA
EnumPageFilesW
GetPerformanceInfo
GetDeviceDriverFileNameW
GetDeviceDriverFileNameA
GetDeviceDriverBaseNameW
GetDeviceDriverBaseNameA
EnumDeviceDrivers
GetMappedFileNameA
GetMappedFileNameW
InitializeProcessForWsWatch
QueryWorkingSet
EmptyWorkingSet
GetModuleBaseNameW
GetModuleBaseNameA
GetProcessImageFileNameW
GetProcessImageFileNameA
GetWsChanges
GetModuleFileNameExW
GetModuleFileNameExA

setupapi

SetupDiSetDeviceRegistryPropertyW
SetupDiGetClassRegistryPropertyW
SetupDiGetDeviceRegistryPropertyW
SetupDiSetClassRegistryPropertyW

comctl32

InitCommonControlsEx

msimg32

AlphaBlend

secur32

GetUserNameExW

netapi32

Netbios

wintrust

WTHelperProvDataFromStateData
WinVerifyTrust

crypt32

CertGetNameStringW

Exports

Exports

de265_alloc_image_plane
de265_change_framerate
de265_decode
de265_decode_data
de265_disable_logging
de265_flush_data
de265_free
de265_free_decoder
de265_free_image_plane
de265_get_bits_per_pixel
de265_get_chroma_format
de265_get_current_TID
de265_get_default_image_allocation_functions
de265_get_error_text
de265_get_highest_TID
de265_get_image_NAL_header
de265_get_image_PTS
de265_get_image_colour_primaries
de265_get_image_full_range_flag
de265_get_image_height
de265_get_image_matrix_coefficients
de265_get_image_plane
de265_get_image_plane_user_data
de265_get_image_transfer_characteristics
de265_get_image_user_data
de265_get_image_width
de265_get_next_picture
de265_get_number_of_NAL_units_pending
de265_get_number_of_input_bytes_pending
de265_get_parameter_bool
de265_get_version
de265_get_version_number
de265_get_version_number_maintenance
de265_get_version_number_major
de265_get_version_number_minor
de265_get_warning
de265_init
de265_isOK
de265_new_decoder
de265_peek_next_picture
de265_push_NAL
de265_push_data
de265_push_end_of_NAL
de265_push_end_of_frame
de265_release_next_picture
de265_reset
de265_set_framerate_ratio
de265_set_image_allocation_functions
de265_set_image_plane
de265_set_image_user_data
de265_set_limit_TID
de265_set_parameter_bool
de265_set_parameter_int
de265_set_verbosity
de265_start_worker_threads

Sections

.text
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 428KB - Virtual size: 425KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 157KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 128KB - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 104KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a81994a8e54b90ebc57ddfe905d7f15e

Headers

DLL Characteristics

File Characteristics

Imports

gdiplus

kernel32

user32

gdi32

winspool.drv

comdlg32

advapi32

shell32

ole32

oleaut32

shlwapi

ws2_32

version

psapi

setupapi

comctl32

msimg32

secur32

netapi32

wintrust

crypt32

Exports

Exports

Sections

.text Size: 2.2MB - Virtual size: 2.2MB

.rdata Size: 428KB - Virtual size: 425KB

.data Size: 36KB - Virtual size: 157KB

.rsrc Size: 128KB - Virtual size: 126KB

.reloc Size: 104KB - Virtual size: 102KB

.text
Size: 2.2MB - Virtual size: 2.2MB

.rdata
Size: 428KB - Virtual size: 425KB

.data
Size: 36KB - Virtual size: 157KB

.rsrc
Size: 128KB - Virtual size: 126KB

.reloc
Size: 104KB - Virtual size: 102KB