W:\NgtrcT\mkorw\zlgi\mhmodurV\UsEeaHM.pdb
Static task
static1
Behavioral task
behavioral1
Sample
966c5426badcfd9f311de32d17b8aa22.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
966c5426badcfd9f311de32d17b8aa22.exe
Resource
win10v2004-20231215-en
General
-
Target
966c5426badcfd9f311de32d17b8aa22
-
Size
174KB
-
MD5
966c5426badcfd9f311de32d17b8aa22
-
SHA1
5e55847d2c9402527ee2f700d22809e6da0239c5
-
SHA256
ca22788ac5e49ad25f8a62bd20d0c1db2e9971635e5b6b811e6d1c3beb5b5314
-
SHA512
40cb4a524c403094e9a62825871288623357a576a6d03f6db31d820d23f666b0d639d534030c9698d30d370bd5a2f4d9759b2e64a77c9e5f8b28c690598640fa
-
SSDEEP
3072:xABH1709Vk6FproHwvTrKYFhFK5C4+w80Xt/vBdUsBaZM+/j:xspejXo0TrnK8MvqG+/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 966c5426badcfd9f311de32d17b8aa22
Files
-
966c5426badcfd9f311de32d17b8aa22.exe windows:5 windows x86 arch:x86
985ee707fdb73eb7e19ce640a419fdfb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
GetMessagePos
CreateCursor
GetWindowLongW
RemovePropW
GetWindowRect
DeleteMenu
GetPropW
GetScrollPos
TrackPopupMenuEx
GetMenuItemID
SetSysColors
ShowScrollBar
SetDlgItemInt
kernel32
SetThreadContext
TlsSetValue
RemoveDirectoryA
SetLastError
GetProcAddress
LoadLibraryW
lstrcmpiW
TlsFree
CompareStringA
SetFilePointer
IsBadReadPtr
lstrcpynW
EnumSystemLocalesA
gdi32
CreateRoundRectRgn
LPtoDP
GetObjectW
CreateFontA
EnumFontFamiliesW
RectInRegion
PatBlt
comctl32
CreatePropertySheetPageW
ImageList_GetIconSize
ImageList_GetIcon
comdlg32
GetOpenFileNameW
FindTextW
GetSaveFileNameA
GetFileTitleW
Exports
Exports
?mCQdUcmbzwuEnojz@@YGFPAI@Z
?jUHfdmwJmuGnqsWi@@YGPAEPAM@Z
?cMpqrrWcna@@YGMPAF@Z
?uVfpbjaynHxusrse@@YG_NDJ@Z
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.temp Size: 140KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 205B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ