c:\eatfeorrln\ltthqins.pdb
Static task
static1
Behavioral task
behavioral1
Sample
88235f7e38def12030f2f4599a3fb50f.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
88235f7e38def12030f2f4599a3fb50f.exe
Resource
win10v2004-20231215-en
General
-
Target
88235f7e38def12030f2f4599a3fb50f
-
Size
581KB
-
MD5
88235f7e38def12030f2f4599a3fb50f
-
SHA1
8b8ce29483012437a9599ec5ac6927fd57f09262
-
SHA256
3173bdccb9e67ecca5bb5f2b25d41842c4cd4af55d781bc61dc9d9d304a32d76
-
SHA512
7e94c25c3c26c9dbe9bc53565096a0c3d864d41fce5f9047e587989892fb69e11b7c981018a7dfd6fea180984d27266aca9cf597ae01e66b9b28af87b9382244
-
SSDEEP
12288:jD0K7NKkeTIQRmRZS5+gBaA1+YKm3/vlZs39mnW6oHg+LX:v77NKkeUsRJBaYx09mjkZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 88235f7e38def12030f2f4599a3fb50f
Files
-
88235f7e38def12030f2f4599a3fb50f.exe windows:4 windows x86 arch:x86
734e5e96e3dad8affd61580ae8fd6840
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
comctl32
ImageList_SetFlags
ImageList_SetFilter
DrawInsert
ImageList_ReplaceIcon
ImageList_Create
CreateToolbarEx
ImageList_GetImageCount
ImageList_DragMove
ImageList_AddMasked
ImageList_LoadImageA
ImageList_SetIconSize
ImageList_DrawIndirect
InitCommonControlsEx
ImageList_LoadImageW
CreateStatusWindow
shell32
SheChangeDirExW
kernel32
InterlockedIncrement
VirtualFree
TlsFree
SetStdHandle
GetConsoleCP
InitializeCriticalSectionAndSpinCount
TlsAlloc
FreeEnvironmentStringsA
InterlockedExchange
FreeEnvironmentStringsW
GetProcAddress
ExitProcess
Sleep
HeapReAlloc
IsValidLocale
TerminateProcess
FlushFileBuffers
InterlockedDecrement
GetModuleHandleW
LeaveCriticalSection
GetTimeFormatA
LCMapStringW
GetEnvironmentStringsW
CompareStringA
CreateFileA
WriteConsoleW
GetConsoleOutputCP
HeapFree
SetHandleCount
EnumSystemLocalesA
WideCharToMultiByte
SetUnhandledExceptionFilter
EnumResourceLanguagesA
IsDebuggerPresent
TlsGetValue
GetLocaleInfoW
CloseHandle
IsBadReadPtr
CompareStringW
WriteConsoleA
GetLocaleInfoA
GetEnvironmentStrings
ReadFile
GetSystemTimeAsFileTime
TlsSetValue
HeapSize
HeapCreate
GetOEMCP
GetConsoleMode
MultiByteToWideChar
RtlUnwind
SetFilePointer
DeleteCriticalSection
OpenMutexA
FreeLibrary
HeapDestroy
GetCurrentProcessId
GetStartupInfoA
GetStdHandle
GetCurrentProcess
WriteFile
GetLastError
LoadLibraryExW
GetModuleFileNameA
SetConsoleCtrlHandler
VirtualAlloc
GetCurrentThreadId
UnhandledExceptionFilter
GetDateFormatA
GetCPInfo
GetExitCodeThread
GetACP
GetTickCount
IsValidCodePage
GetStringTypeW
GetCommandLineA
GetUserDefaultLCID
QueryPerformanceCounter
GetFileType
GetModuleHandleA
CreateMutexW
VirtualQuery
LCMapStringA
GetTimeZoneInformation
CreateMutexA
LoadLibraryA
GetCurrentThread
SetLastError
SetEnvironmentVariableA
GetStringTypeA
HeapAlloc
EnterCriticalSection
gdi32
SetTextCharacterExtra
EnumFontsW
GetWinMetaFileBits
SetArcDirection
SetBitmapBits
CreateMetaFileA
GetCharacterPlacementW
CreateRectRgn
GetTextExtentPoint32W
SetTextJustification
CreateHatchBrush
UpdateColors
GetEnhMetaFileDescriptionA
user32
MenuItemFromPoint
RegisterDeviceNotificationA
SwitchToThisWindow
SendMessageW
SetUserObjectInformationA
GetClientRect
SetPropA
MsgWaitForMultipleObjectsEx
RegisterClassA
GetWindowWord
CreateIcon
AdjustWindowRect
InsertMenuW
EndMenu
GetClassWord
LoadStringA
MapDialogRect
GetWindowTextLengthA
DdeDisconnectList
RegisterClassExA
DialogBoxParamA
wininet
InternetSetOptionExA
HttpSendRequestW
InternetReadFileExA
InternetSecurityProtocolToStringW
Sections
.text Size: 189KB - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 249KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 114KB - Virtual size: 141KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ