I:\sjYytup\FTomKzrs\ycrWyRQ.pdb
Static task
static1
Behavioral task
behavioral1
Sample
7e3717a352d646a255a8c868b61aebeb.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7e3717a352d646a255a8c868b61aebeb.exe
Resource
win10v2004-20231222-en
General
-
Target
7e3717a352d646a255a8c868b61aebeb
-
Size
107KB
-
MD5
7e3717a352d646a255a8c868b61aebeb
-
SHA1
bb6cdac064c71750ea76d18e651a721547a10b74
-
SHA256
0893d569c9c79b06fe87324315b7769f6a74ebb8bf5cfdd310ebcce27ac7d9a1
-
SHA512
7b71cec56a6eaeb313a04b5b7e7e0c9f16a4059ea03bbbd956138a965d35b9f4c51b77fbfe2ff42cdd76bcca8b11b69fc396e3f78ece06b6c53d34dea81093fc
-
SSDEEP
3072:EdlZocPxzHYLJU4W0xhy9coGFz1DgFyHWcIE8nx:ErP1am4zoA3Zl8x
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7e3717a352d646a255a8c868b61aebeb
Files
-
7e3717a352d646a255a8c868b61aebeb.exe windows:5 windows x86 arch:x86
f7d014613f59d41e66616bb253a876cc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
ConnectNamedPipe
DeleteFileW
IsBadWritePtr
GetFileAttributesExA
lstrcmpiW
FindNextChangeNotification
CreateFileW
CreateEventA
LoadLibraryW
GetThreadLocale
ResumeThread
lstrlenA
GetProcAddress
gdi32
GetTextExtentPointW
GetBitmapBits
SetWindowOrgEx
StretchDIBits
Ellipse
CreateFontIndirectA
GetLayout
comdlg32
GetOpenFileNameA
ChooseColorW
GetOpenFileNameW
PrintDlgExW
shlwapi
StrCmpNA
user32
OpenIcon
CheckDlgButton
AppendMenuA
DrawStateW
GetMenuItemID
GetPropW
OpenDesktopW
CopyRect
ShowScrollBar
DrawStateA
GetMenuItemRect
GetWindowLongW
comctl32
CreatePropertySheetPageA
ImageList_GetIconSize
ImageList_GetIcon
ImageList_Destroy
Exports
Exports
?fsvfDoZXFVazKeTgzUYrse@@YGXG@Z
?heenHoWofjdvzsNvh@@YGKFG@Z
?aGVyaQmrztngdvz@@YGDM@Z
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 172B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.temp Size: 74KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ