H:\gWtlvqA\ulgxmpw\eaumsxag\HbpOfcY.pdb
Static task
static1
Behavioral task
behavioral1
Sample
8b9182474a85e2b28723da3d8eb11bd8.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8b9182474a85e2b28723da3d8eb11bd8.exe
Resource
win10v2004-20231215-en
General
-
Target
8b9182474a85e2b28723da3d8eb11bd8
-
Size
92KB
-
MD5
8b9182474a85e2b28723da3d8eb11bd8
-
SHA1
e6f45d9f1bd0079728c8bbb576fe6fed478278de
-
SHA256
db4330d2a749be7494b48b64a6f07e16a14525fa058ab7e5057b54ca248805a2
-
SHA512
e19d30aafa99fb0454f0460fc80f48917959e15b77c7de2ccfe6e0e8b3c53e00c15c7c8619d8a218112211ab5e1f7c7ae911ba43f35870b0077bc04407395f6a
-
SSDEEP
1536:7ca5rd7ZmeHe5YTMMMac8pGgv8cYbm0MryqbH0g42wiEQYEgAv:oudZ1dxP8k0ZqbHh43iy9A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8b9182474a85e2b28723da3d8eb11bd8
Files
-
8b9182474a85e2b28723da3d8eb11bd8.exe windows:5 windows x86 arch:x86
e45f7550f1e62767da61c19c074049da
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
shlwapi
StrStrA
comdlg32
ChooseFontW
CommDlgExtendedError
gdi32
SetBitmapBits
SetWindowOrgEx
GetObjectW
SelectClipRgn
SetDIBits
CreateBitmapIndirect
SetPaletteEntries
DeleteDC
user32
BeginDeferWindowPos
SetActiveWindow
GetShellWindow
wvsprintfA
IsRectEmpty
GetKeyboardType
SendMessageA
LoadAcceleratorsA
DeferWindowPos
RegisterHotKey
FindWindowW
GetWindowTextLengthW
CreateMenu
GetWindowLongA
kernel32
GetModuleHandleW
lstrcmpiW
GetBinaryTypeA
SetUnhandledExceptionFilter
GetProcAddress
SuspendThread
OpenEventW
CreateFileMappingA
CallNamedPipeW
GlobalUnlock
GetSystemDirectoryA
lstrcmpiA
InitializeCriticalSection
ExitThread
Exports
Exports
?ArxtriqnoVsZKltYd@@YGPANPANPAE@Z
?vstfTytIbBcAe@@YGXHJ@Z
?sefznmPCb@@YGEG@Z
?ksetyngKkf@@YGDPAJD@Z
?ChMcgpcG@@YGJNPAK@Z
?xnGnqzxCkr@@YGXKM@Z
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 63KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ