F:\zFFGSASSAD\98hasfjs.pdb
Static task
static1
Behavioral task
behavioral1
Sample
985e08633bd7d73447b100aedc00543d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
985e08633bd7d73447b100aedc00543d.exe
Resource
win10v2004-20231222-en
General
-
Target
985e08633bd7d73447b100aedc00543d
-
Size
220KB
-
MD5
985e08633bd7d73447b100aedc00543d
-
SHA1
5e44abc70a065b58229ca415447c313ddaa98806
-
SHA256
f87aa7ce51e3fc1ad5b3c16c01bf65094864595e5723eb11003a509e062e0d5f
-
SHA512
600e2e5bb3afbf22f9623d0c24ab7469a7be95d495fc4147abd945727916e3efd922dbc9a4a8c3c0f91837220e6fb77b290fd0f81b88a789383380359a85d506
-
SSDEEP
6144:iVcwEL1pmM1Zl48QYQ5Ryf8ibv0zDlfN74:i2wi191Z8gkibv0tfN74
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 985e08633bd7d73447b100aedc00543d
Files
-
985e08633bd7d73447b100aedc00543d.exe windows:4 windows x86 arch:x86
725d151132cb38d057a23ce541695555
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
ws2_32
WSAGetLastError
kernel32
GetTickCount
CompareStringW
GetProcAddress
LoadLibraryA
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
GetCurrentThread
SetUnhandledExceptionFilter
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
SetEnvironmentVariableA
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
Sleep
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
InitializeCriticalSection
VirtualAlloc
HeapReAlloc
RtlUnwind
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
HeapSize
GetLocaleInfoW
GetTimeZoneInformation
CompareStringA
Sections
.text Size: 72KB - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 128KB - Virtual size: 126KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ