e:\Download\test123\2424\Release\2424.pdb
Static task
static1
Behavioral task
behavioral1
Sample
a351c657b3cd749db4a10a1fa125ce78.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a351c657b3cd749db4a10a1fa125ce78.exe
Resource
win10v2004-20240221-en
General
-
Target
a351c657b3cd749db4a10a1fa125ce78
-
Size
79KB
-
MD5
a351c657b3cd749db4a10a1fa125ce78
-
SHA1
d7c2d1124eda5b3a5033761d82f23fbd2b89788d
-
SHA256
c1ae9f4cbad7c6b67fe3b53cd85f777ac762af3c2c4e0f29d3db730a21087953
-
SHA512
eeb4b6775dcb6099f1f304797a585e802d679e8f75d0dfd3b9e93dd026d7244f5499cf1dcf757f4dcbd89a9391e7b2abbf8b143e6f4fcc32c417efc966e7544b
-
SSDEEP
768:vmWT9zZstBBRRIv9eUuy7YkTl0R8lMgG6qoF+f:vm4dZWRRI1eHVValMKqoF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a351c657b3cd749db4a10a1fa125ce78
Files
-
a351c657b3cd749db4a10a1fa125ce78.exe windows:4 windows x86 arch:x86
900f5907b1756fea4074216a86b9238e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
CreateFileA
ReadFile
SetFilePointer
WriteFile
CloseHandle
GetFileSize
GlobalAlloc
GetTickCount
ExitProcess
CreateFileW
GetModuleHandleA
Sleep
VirtualAlloc
GetProcAddress
LoadLibraryA
GetCommandLineA
GetModuleFileNameA
WriteProcessMemory
GetLastError
GetCurrentProcessId
lstrcpyA
GetModuleFileNameW
GetSystemTime
ResumeThread
VirtualProtect
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetStartupInfoA
GetVersionExA
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
InterlockedExchange
VirtualQuery
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
HeapReAlloc
HeapSize
GetSystemInfo
user32
GetActiveWindow
GetDC
GetForegroundWindow
Sections
.text Size: 52KB - Virtual size: 49KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 680B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ