G:\aqjcDxE\rcelJtkauOIh\jZtENgrrc.pdb
Static task
static1
Behavioral task
behavioral1
Sample
aacabb31a4a8387daaeb9f4234deb9d6.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
aacabb31a4a8387daaeb9f4234deb9d6.exe
Resource
win10v2004-20240226-en
General
-
Target
aacabb31a4a8387daaeb9f4234deb9d6
-
Size
138KB
-
MD5
aacabb31a4a8387daaeb9f4234deb9d6
-
SHA1
66203774144803bdee8750df70453f95624dcd45
-
SHA256
88e50fe6ac07118c4022c89c64868bae0afc2a1e8d0918624c0edcf20b0179b7
-
SHA512
3bafcc6d050a543dbef6e74aa26157d9bb788a902264eb9021410fa8b89a335ceabdb3e940e9a8ed89afe002c236a05a08ded7d3ee09a8479f5106d28521616c
-
SSDEEP
3072:7ChpFGKbyChHRR+TqSO5nQhsnfSQAH20iH9hMgyh:7Ch7GKbftjeqdRQhAfiR49x
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aacabb31a4a8387daaeb9f4234deb9d6
Files
-
aacabb31a4a8387daaeb9f4234deb9d6.exe windows:5 windows x86 arch:x86
fd2807a22c3bd0e05403988b26a90b00
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
GetAsyncKeyState
SendDlgItemMessageW
CharToOemA
LoadMenuA
OpenIcon
LoadBitmapA
GetDCEx
InSendMessage
InternalGetWindowText
CreateWindowExW
ActivateKeyboardLayout
IsDialogMessageW
SetDlgItemTextA
EnableWindow
GetMenuItemID
SetRectEmpty
GetUpdateRect
DestroyAcceleratorTable
GetWindowTextLengthW
GetWindowDC
FillRect
CheckMenuItem
GetMenuItemRect
LoadAcceleratorsW
GetForegroundWindow
GetClientRect
GetUserObjectInformationW
SetPropW
AdjustWindowRectEx
SetParent
GetDlgItemTextA
wvsprintfW
DestroyCursor
DrawFocusRect
DialogBoxIndirectParamW
InsertMenuItemW
GetMessageW
GetDialogBaseUnits
ShowOwnedPopups
OpenInputDesktop
CheckRadioButton
IsCharLowerA
GetWindowTextA
RegisterWindowMessageA
kernel32
GetModuleHandleW
LocalReAlloc
SetEvent
CopyFileA
GlobalLock
ExitThread
IsValidLanguageGroup
EnumResourceLanguagesA
RegisterWaitForSingleObject
GetModuleFileNameA
SetWaitableTimer
OpenFileMappingW
lstrlenA
LocalFree
ConvertDefaultLocale
HeapSize
GlobalAddAtomA
GetCurrentThread
FlushFileBuffers
lstrlenW
MapViewOfFile
GetACP
gdi32
WidenPath
GetNearestColor
GetTextMetricsW
CreateFontW
CreateEllipticRgnIndirect
Rectangle
CreateFontIndirectW
GetTextExtentPointW
StretchDIBits
GetDeviceCaps
Escape
CreateDiscardableBitmap
ExtTextOutA
SaveDC
ExcludeClipRect
EndPage
SelectObject
CreateDCW
advapi32
OpenBackupEventLogW
shlwapi
ord157
ord29
StrStrIA
msvcrt
getenv
clock
setvbuf
_controlfp
rand
__set_app_type
fgetc
__p__fmode
__p__commode
fputs
_amsg_exit
_initterm
wcstol
iswalpha
swprintf
iswspace
bsearch
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__setusermatherr
__getmainargs
isalnum
Exports
Exports
?IncrementFunctionExW@@YGPAEPAEPAJ*Z
?IsProjectNew@@YGDDM*Z
?KillFolderNew@@YGKF*Z
?HideTaskA@@YGEGK*Z
?CloseOptionExA@@YGPAXPA_NDF*Z
?RtlHeaderA@@YG_NPAFGKJ*Z
Sections
.text Size: 107KB - Virtual size: 107KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.etdir Size: 512B - Virtual size: 368B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.itdir Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vtdir Size: 512B - Virtual size: 140B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ptdir Size: 512B - Virtual size: 140B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.stdir Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ