V:\inzgmwqcsREBm\nxbCiaoqCw\hMwVynPIwwu.pdb
Static task
static1
Behavioral task
behavioral1
Sample
860d43b440c7b3fa61f1eb4dfa1efd32.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
860d43b440c7b3fa61f1eb4dfa1efd32.exe
Resource
win10v2004-20231222-en
General
-
Target
860d43b440c7b3fa61f1eb4dfa1efd32
-
Size
171KB
-
MD5
860d43b440c7b3fa61f1eb4dfa1efd32
-
SHA1
1a85ee901fa6aaaec6ae0021d3f4861d1abf00f6
-
SHA256
4467b3c4fe2448cb4b2bc57ac3996ee5c3fdb2428661670ba1fbb0c91259d902
-
SHA512
4508750d64953ffef739ee20e90ee30353eb3bff785b2c18c3ab6b2965f66dcecea405350e96030d4dea5a33a5f38f2f135f260302cf26a59a1cca069d025d51
-
SSDEEP
3072:Z/Sl/DhzEK3vgeI8X6autqIlFLI0UljKmvqLx6ZKCcUpT6ox:orZXvpIjbZrI0UljYDUp6o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 860d43b440c7b3fa61f1eb4dfa1efd32
Files
-
860d43b440c7b3fa61f1eb4dfa1efd32.exe windows:5 windows x86 arch:x86
d5b486580c400d91201d8ac297b83653
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetShortPathNameW
GetLastError
HeapSize
CreateWaitableTimerW
GetSystemDefaultLangID
GetStartupInfoA
CreateMailslotW
shlwapi
PathMakeSystemFolderW
advapi32
RegQueryValueW
RegQueryMultipleValuesA
RegQueryMultipleValuesW
user32
GetTopWindow
GetActiveWindow
GetWindowRect
MessageBoxIndirectA
MessageBoxIndirectW
MessageBeep
KillTimer
ntdll
RtlCompareMemory
Exports
Exports
?ValidateDataInFile@@YGKXZ
Sections
.text Size: 131KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pack1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ihnlckv Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE