IEDiagCmd.pdb
Static task
static1
Behavioral task
behavioral1
Sample
8ae7b97d7f756279f326ce80a3f67e82.exe
Resource
win7-20231215-en
General
-
Target
8ae7b97d7f756279f326ce80a3f67e82
-
Size
530KB
-
MD5
8ae7b97d7f756279f326ce80a3f67e82
-
SHA1
58cb7f4fd79dbb3b6a2d7d8923df0b63a383ecfd
-
SHA256
234c8fc35eb5d60db3b7a0ab45cb55326ddeba5a43546995e85b25f4f623e8bf
-
SHA512
61be03acc6386d13858e7bbd43627363be294104fec62cc6f96b2970bafcc2d8288b43a81c50b32fbc46b026328121413f9c5141caafc5c05527900a532b8350
-
SSDEEP
12288:RjQJGJ17jTmTpq1Zi2HnGPLIwgjjyp21ZZq8:lQJGJI10ILIwwj6Kq8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8ae7b97d7f756279f326ce80a3f67e82
Files
-
8ae7b97d7f756279f326ce80a3f67e82.exe windows:10 windows x64 arch:x64
8ad7d3f07924e8c2b7127391afd2da11
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
msvcrt
_vsnwprintf
_callnewh
malloc
?terminate@@YAXXZ
_amsg_exit
_cexit
??3@YAXPEAX@Z
memcpy
memset
_itow
_errno
kernel32
SetLastError
GetModuleHandleA
GetProcAddress
GetVersion
GetLastError
VirtualQuery
TerminateProcess
GetCurrentProcess
Sleep
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
RaiseException
LoadLibraryW
FreeLibrary
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
OutputDebugStringA
SetUnhandledExceptionFilter
QueryPerformanceCounter
mscoree
CorBindToRuntimeEx
_CorExeMain
ole32
CoCreateInstance
comctl32
ord332
ord334
ord386
ord328
oleacc
ObjectFromLresult
oleaut32
VariantInit
SysFreeString
VariantClear
SysAllocStringLen
SysStringLen
SysAllocString
user32
RegisterWindowMessageW
SendMessageTimeoutW
Sections
.text Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.nep Size: 512B - Virtual size: 96B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 335KB - Virtual size: 334KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 420B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE