K:\wihSu\Fyefyvy\xzntdr\jyjGcofG.pdb
Static task
static1
Behavioral task
behavioral1
Sample
acbadbdbf72d1506c2004413517fed9a.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
acbadbdbf72d1506c2004413517fed9a.exe
Resource
win10v2004-20240226-en
General
-
Target
acbadbdbf72d1506c2004413517fed9a
-
Size
169KB
-
MD5
acbadbdbf72d1506c2004413517fed9a
-
SHA1
cc72f6953b678e2656f5436579eefc35f09d42c7
-
SHA256
9311f2c2eb3c8c15c03cd50296840f1be6759fc45d8b3a0c845e376c2ddc3d89
-
SHA512
d9cab07367631b3d624344975c0c77821134f6947519fd171d287ffe33af3dee11e693b671c73d3e3bde0e763c8b0ce390581fe22dd1753b44919de0738b46be
-
SSDEEP
3072:X7b/Uh3M6A/1XnhsMHyq/NmN1kmtAtpZYmvQ0m0pVH1Ek+UlbF12:/sH2dhL3/UF++mo0nDVHU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource acbadbdbf72d1506c2004413517fed9a
Files
-
acbadbdbf72d1506c2004413517fed9a.exe windows:5 windows x86 arch:x86
0b8b72033afa2b702fd12b278cf67ed5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
shlwapi
PathFindExtensionW
comdlg32
GetFileTitleW
GetSaveFileNameA
GetSaveFileNameW
gdi32
GetRgnBox
MoveToEx
ScaleViewportExtEx
CreateFontIndirectA
GetStockObject
UnrealizeObject
GetBitmapBits
comctl32
PropertySheetA
CreatePropertySheetPageA
ImageList_Draw
ImageList_GetIconSize
user32
GetKeyState
WaitMessage
ClientToScreen
SetParent
IsWindow
GetClassNameW
GetNextDlgTabItem
CopyAcceleratorTableW
MapVirtualKeyA
GetSysColor
IsWindowVisible
AdjustWindowRect
CreateMenu
kernel32
GetTempFileNameA
AreFileApisANSI
LCMapStringW
AddAtomW
IsBadWritePtr
GetModuleHandleA
GetProcAddress
SearchPathW
IsBadCodePtr
GetModuleHandleW
IsBadStringPtrW
GlobalSize
Exports
Exports
?AwuGVfGlMHfAXHgdhho@@YGKK_N@Z
?vckdcyfikukOqjgazWst@@YGPAXPAHD@Z
?ixrlyrqxsb@@YGXK@Z
?mxnnvlnKvsttwH@@YGJIN@Z
?nhuSbmcXbf@@YGPADKPAI@Z
Sections
.text Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 235B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 282KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ