H:\GvOjdLn\CSofaA\uSlnTNv\cfxXo\xgWyjhg.pdb
Static task
static1
Behavioral task
behavioral1
Sample
7c3f6c0514deb396b8991927e65e70e1.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7c3f6c0514deb396b8991927e65e70e1.exe
Resource
win10v2004-20231215-en
General
-
Target
7c3f6c0514deb396b8991927e65e70e1
-
Size
163KB
-
MD5
7c3f6c0514deb396b8991927e65e70e1
-
SHA1
136735647f1a2879c5bd50707bd9743bf92e443a
-
SHA256
a9ecf2d07695450c6c41f4cd13aae3fded727e8be682c49f64daaad65a718013
-
SHA512
386f011f0967e0c3278685e72d47f2bc1deae258fe8b1c15c73a260d13ac4a812b0a7f7b9977154959975be98a20fb8cb4a21a7d16fcb92b1ff0cd3a89815e17
-
SSDEEP
3072:cuPpjAo96Tanbqdy9zSFDh0jYsYu9w4GeTGFTIoSihV+w1FevGnOC8ztIl0U0:cuR0LSmdy9M00sJcTr7hcaUGnOzIlM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7c3f6c0514deb396b8991927e65e70e1
Files
-
7c3f6c0514deb396b8991927e65e70e1.exe windows:5 windows x86 arch:x86
2a05a98f985b5154f95c7c44f97fb1c6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
gdi32
SetViewportOrgEx
GetPixel
RectInRegion
OffsetRgn
GetTextColor
GetTextMetricsW
CreateBitmapIndirect
EndPath
SetPixel
kernel32
SetFileApisToOEM
GetNumberFormatA
EnumResourceNamesA
GetFileType
GetModuleHandleW
GetTickCount
GetProcAddress
lstrcmpiA
UnlockFile
GetSystemTimeAsFileTime
OpenEventA
EnterCriticalSection
GetModuleFileNameW
CreateWaitableTimerW
user32
DrawStateA
GetWindowLongA
InvalidateRgn
DrawTextA
GetScrollRange
IsRectEmpty
DrawIconEx
IsWindowUnicode
FindWindowW
DrawStateW
GetShellWindow
SetWindowTextA
RedrawWindow
DispatchMessageW
shlwapi
StrStrA
Exports
Exports
?naynfGLeRbNMab@@YGPA_NEH@Z
?UtfydsVxptsaqF@@YGJPAJ@Z
?txeLqnyrthVoQ@@YGPAXPAE@Z
?bvhlfvp@@YGJPAM@Z
?hBCmsvxlgHmO@@YGNHJ@Z
?EXnaONAfyb@@YGFK@Z
?gcqygyNdovjllbIbtjrgPk@@YGEPAHI@Z
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 87KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 135KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ