E:\desktop\Visual Studio 2012\Projects\testdotnet\js_init\Debug\js_init.pdb
Static task
static1
Behavioral task
behavioral1
Sample
7c014cfa856d4f1932fc5c6c3c8959c6.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7c014cfa856d4f1932fc5c6c3c8959c6.exe
Resource
win10v2004-20231222-en
General
-
Target
7c014cfa856d4f1932fc5c6c3c8959c6
-
Size
1.1MB
-
MD5
7c014cfa856d4f1932fc5c6c3c8959c6
-
SHA1
1ac79b4ac891418745d5783cf49362cd87c98819
-
SHA256
6e5fabc89037e71afbba4f68bc1fe1bd84793f180e4376b6c962389ad75c381e
-
SHA512
d8090fac4e793fd5252eb8a05d2c1cc08a38fbbd8f3fbc0ad680a7906181db8eb077af1d85717e9a5787c3b91cca3564855da7761b0b019c57215c1189f4f473
-
SSDEEP
12288:tMTiiIa9wzznnf7Dsgozn87iOHPjQDAMBB4JK9sPiOisPSiDoMSkQPUHmA7f:IiiyiOHbQDxn9sACSiXS/J
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7c014cfa856d4f1932fc5c6c3c8959c6
Files
-
7c014cfa856d4f1932fc5c6c3c8959c6.exe windows:6 windows x86 arch:x86
9e9e8f00bf481180def33e56422df5b1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
WinExec
InterlockedIncrement
InterlockedDecrement
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
Sleep
InterlockedExchange
EncodePointer
DecodePointer
WideCharToMultiByte
GetLocaleInfoEx
MultiByteToWideChar
GetStringTypeW
IsDebuggerPresent
IsProcessorFeaturePresent
RaiseException
RtlUnwind
GetModuleFileNameW
GetModuleHandleExW
HeapValidate
GetSystemInfo
GetCommandLineA
InitializeCriticalSectionAndSpinCount
FatalAppExitA
GetCPInfo
GetLastError
GetStdHandle
WriteFile
ExitProcess
GetProcAddress
AreFileApisANSI
UnhandledExceptionFilter
SetUnhandledExceptionFilter
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetCurrentProcess
TerminateProcess
GetStartupInfoW
GetModuleHandleW
IsValidCodePage
GetACP
GetOEMCP
SetLastError
GetCurrentThread
GetCurrentThreadId
LoadLibraryExW
lstrlenA
LoadLibraryW
CloseHandle
FlushFileBuffers
GetConsoleCP
GetConsoleMode
GetFileType
InitOnceExecuteOnce
ReadFile
SetFilePointerEx
SetConsoleCtrlHandler
OutputDebugStringW
WaitForSingleObjectEx
CreateThread
OutputDebugStringA
WriteConsoleW
HeapFree
HeapReAlloc
HeapSize
HeapQueryInformation
GetModuleFileNameA
HeapAlloc
GetProcessHeap
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetTickCount64
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetTimeFormatEx
GetDateFormatEx
CompareStringEx
GetUserDefaultLocaleName
LCMapStringEx
IsValidLocaleName
EnumSystemLocalesEx
SetFilePointer
GetTimeZoneInformation
FreeLibrary
VirtualQuery
SetStdHandle
ReadConsoleW
CreateFileW
SetEndOfFile
SetEnvironmentVariableA
Sections
.textbss Size: - Virtual size: 396KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 834KB - Virtual size: 834KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 204KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ