ctfmon.pdb
Static task
static1
Behavioral task
behavioral1
Sample
9920f95ab4438a1b4e023a6a1845d75d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9920f95ab4438a1b4e023a6a1845d75d.exe
Resource
win10v2004-20231215-en
General
-
Target
9920f95ab4438a1b4e023a6a1845d75d
-
Size
14KB
-
MD5
9920f95ab4438a1b4e023a6a1845d75d
-
SHA1
6e5707b404a9760788ebcf9093adec4ee9978cd8
-
SHA256
d2a255a756e1a764cd0346931d367be6856080977fec298e61afde46b26ab36d
-
SHA512
c9b70f4a6b7e0d6b9123e26a0eee7c5edc4f5f8ce22483c2f263b6a218d2082b9abf53fa751860c2950540e11a9ae4a66a8a1c87b5eb4f893ff3804880dc6401
-
SSDEEP
192:BQYcGow4F/MHhlYWpjZG+XG9H0XsCAu8OvbVVGk+2pqSNdBfcfkljrUFScWCgW:B7L8+QMstuxvJVG45NdBekJ4WCgW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9920f95ab4438a1b4e023a6a1845d75d
Files
-
9920f95ab4438a1b4e023a6a1845d75d.exe windows:5 windows x86 arch:x86
e741387ebc4cce1dadc398cd340a093c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
CreateEventA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
LoadLibraryA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
FreeLibrary
lstrcmpiA
GetStartupInfoA
GetCommandLineA
GetModuleHandleA
ExitProcess
GetSystemInfo
lstrcatA
CreateProcessA
OpenEventA
ResetEvent
CloseHandle
GetProcAddress
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetACP
GetVersionExA
GetSystemWindowsDirectoryA
lstrcpynA
GetSystemDirectoryA
lstrlenA
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
advapi32
RegDeleteValueA
RegOpenKeyExA
RegCreateKeyExA
RegCreateKeyA
RegSetValueExA
RegCloseKey
user32
EnumWindows
GetClassNameA
FindWindowA
PostMessageA
SetTimer
KillTimer
PeekMessageA
TranslateMessage
DispatchMessageA
GetMessageA
SetWindowPos
GetSystemMetrics
LoadCursorA
RegisterClassExA
DefWindowProcA
PostQuitMessage
CreateWindowExA
MsgWaitForMultipleObjects
msctf
TF_InvalidAssemblyListCache
TF_InitSystem
TF_GetGlobalCompartment
TF_InvalidAssemblyListCacheIfExist
TF_UninitSystem
TF_PostAllThreadMsg
TF_CreateCicLoadMutex
msutb
GetPopupTipbar
ClosePopupTipbar
Sections
TopFox Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ