V:\yohe\YaTvtSa\tqfMH.pdb
Static task
static1
Behavioral task
behavioral1
Sample
8983641d2f2ad647312ba30398629408.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
8983641d2f2ad647312ba30398629408.exe
Resource
win10v2004-20231222-en
General
-
Target
8983641d2f2ad647312ba30398629408
-
Size
110KB
-
MD5
8983641d2f2ad647312ba30398629408
-
SHA1
1012cf9d53850c1c72117dfc9cd5d44daebbcb23
-
SHA256
77b354670f71633f55f70e47860569e0d8e48c45d9218e84a2793408217bd804
-
SHA512
b65e0aeab520b2238c2cfbb8e77204d4329b99167222ef1511b6e2283b1a67f56801e0135e08b3078756858d904105a966f1524eed0da3ad66bcd97618b5499e
-
SSDEEP
3072:whqvrtLR4IH7Wn348gFUD+mYwjw70lk8n6N:xzlpbWxQUD+JwK86N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8983641d2f2ad647312ba30398629408
Files
-
8983641d2f2ad647312ba30398629408.exe windows:5 windows x86 arch:x86
7f4786ead119e4c706b8ea183963f2e2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
lstrlenW
GetProcAddress
WaitForSingleObject
LoadLibraryW
FindResourceA
HeapAlloc
ReadFile
GetCurrentThread
GetTempPathW
lstrcmpiW
SuspendThread
IsBadStringPtrW
GetAtomNameA
HeapLock
gdi32
PolyBezier
CreatePalette
SetBkColor
SetDIBColorTable
ExtFloodFill
SetBkMode
GetClipBox
EnumFontFamiliesW
shlwapi
StrCmpNW
user32
SetScrollPos
CheckDlgButton
GetMenuContextHelpId
GetSysColor
InsertMenuItemW
GetPropW
IsWindow
GetWindowLongW
DeferWindowPos
DeleteMenu
RemovePropW
IsCharAlphaNumericA
ShowScrollBar
ExitWindowsEx
Exports
Exports
?pGntxJcmkNnfaGb@@YGMFN@Z
?AobxPxniipiEkYfskr@@YGPAXHPAH@Z
?nExLRvecQm@@YGXEF@Z
Sections
.text Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 930B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 167B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.temp Size: 73KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ