C:\ws_61\test_tools\WinTests\mapid\Release\mapid64.pdb
Static task
static1
Behavioral task
behavioral1
Sample
mapid64.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
mapid64.exe
Resource
win10v2004-20240221-en
General
-
Target
0dcb3543296946abec4dd52e63f4236b15eac1de1491e100bcb3a76dc5de52b7.zip
-
Size
43KB
-
MD5
6e99212c63d26b9f4aeb7df9aa191cce
-
SHA1
cd0cfb83d7be571f3187f38d6bd529d3dfbcc08f
-
SHA256
0dcb3543296946abec4dd52e63f4236b15eac1de1491e100bcb3a76dc5de52b7
-
SHA512
164d85aa34b654a5a0023a9b2f3bee99441d1d0681d3817b30f3f77182c24e429f915e380c0f64163d2bf059f9b172748af1969875ab02042304ef8388e55969
-
SSDEEP
768:lBhIQv6RnxVgIcqojAiQ97oyqIC53V0zeE70G3bgvkbIKUlCNw1CLVI/6hHd:lBh8xnWjAoyqI+2F73RUlWpl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/mapid64.exe
Files
-
0dcb3543296946abec4dd52e63f4236b15eac1de1491e100bcb3a76dc5de52b7.zip.zip
-
mapid64.exe.exe windows:5 windows x64 arch:x64
6aae2dfaacb262a36d793fde41a53f4a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
kernel32
FlushFileBuffers
SetStdHandle
ReadFile
CreateFileA
LoadLibraryW
WriteConsoleW
HeapAlloc
HeapReAlloc
SetEndOfFile
GetProcessHeap
HeapSize
LocalFree
GetCurrentThreadId
IsWow64Process
GetProcAddress
FormatMessageW
GetStringTypeW
LCMapStringW
MultiByteToWideChar
Sleep
GetConsoleMode
GetConsoleCP
WideCharToMultiByte
GetModuleHandleW
GetComputerNameW
GetCurrentProcess
GetCommandLineW
GetStartupInfoW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
DecodePointer
EncodePointer
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
FlsGetValue
FlsSetValue
FlsFree
SetLastError
GetLastError
FlsAlloc
RtlUnwindEx
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
HeapFree
CloseHandle
ExitProcess
WriteFile
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapSetInformation
GetVersion
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
CreateFileW
user32
GetDlgItem
EnableWindow
GetWindowRect
DialogBoxParamW
CallNextHookEx
GetClientRect
SendMessageW
LoadIconW
MessageBoxA
SendMessageA
EndDialog
RedrawWindow
SetWindowPos
SetWindowsHookExW
UnhookWindowsHookEx
MessageBoxW
GetSystemMetrics
advapi32
LookupAccountSidW
RegCreateKeyExW
RegQueryValueExA
RegCloseKey
ConvertSidToStringSidW
RegEnumKeyExW
RegOpenKeyExW
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
LookupAccountNameW
ConvertStringSidToSidW
RegDeleteKeyA
ole32
CoUninitialize
CoInitialize
netapi32
NetUserEnum
NetGroupEnum
NetApiBufferFree
NetGetDCName
comctl32
ImageList_ReplaceIcon
ord17
ImageList_Create
Sections
.text Size: 55KB - Virtual size: 54KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 23KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 838B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ