d:\tbvkefe\yaooonoczk\ceed.pdb
Static task
static1
Behavioral task
behavioral1
Sample
b71086b98ce956c60f6bab5c9b1ed72c.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
b71086b98ce956c60f6bab5c9b1ed72c.exe
Resource
win10v2004-20240226-en
General
-
Target
b71086b98ce956c60f6bab5c9b1ed72c
-
Size
572KB
-
MD5
b71086b98ce956c60f6bab5c9b1ed72c
-
SHA1
45a1c9cb8e23cf1d075839cd599d25ab37801734
-
SHA256
b8c9d1a718c2b27fdb4ca773bf371edb6ddfbed0d87bd191e8e9dae9e77e8ea6
-
SHA512
32c40f3ea814150092ce1461e5821cfed3a2f8190c4889e0ddf4fbac4bf3fe091718b0f5c14b2a19af66f713210798270f9d3394350fdcf88c9837cf8bb49594
-
SSDEEP
12288:cOF5afukJS3UAtGzbYfN0hPva4q8G12bZhioNYgRo:cOF5Ku13nMboNCna72PZYg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b71086b98ce956c60f6bab5c9b1ed72c
Files
-
b71086b98ce956c60f6bab5c9b1ed72c.exe windows:4 windows x86 arch:x86
a758d6897df5211d3a29e6332dacfb14
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
shell32
DoEnvironmentSubstA
SHGetDesktopFolder
FindExecutableW
comdlg32
GetOpenFileNameW
ReplaceTextA
PageSetupDlgA
wininet
InternetTimeFromSystemTime
InternetCrackUrlA
InternetSetDialStateW
FtpOpenFileA
kernel32
AddAtomA
CreateFileA
SetConsoleOutputCP
HeapSize
OpenMutexA
GetExitCodeThread
SetFilePointer
GetStartupInfoW
FindNextFileA
EnterCriticalSection
LCMapStringW
LoadLibraryA
OpenWaitableTimerA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
DuplicateHandle
LCMapStringA
GetConsoleTitleW
CloseHandle
TlsFree
FlushFileBuffers
WritePrivateProfileStringA
HeapCreate
InterlockedIncrement
GlobalFlags
GlobalAddAtomW
EnumSystemLocalesA
GetCurrentProcess
GlobalCompact
GetStdHandle
GetFullPathNameA
lstrcpyW
HeapReAlloc
GetStartupInfoA
ReadFile
GetCurrentProcessId
WriteConsoleW
GetPrivateProfileStringW
VirtualFree
SetCurrentDirectoryW
CopyFileExA
AddAtomW
GetCompressedFileSizeA
GetLocaleInfoA
GetUserDefaultLCID
DeleteCriticalSection
FreeLibraryAndExitThread
IsDebuggerPresent
InterlockedDecrement
CompareStringW
GetTimeFormatA
SetHandleCount
DosDateTimeToFileTime
GetCurrentThread
ReadConsoleOutputA
GetLastError
GetProcAddress
HeapFree
ExitProcess
SetConsoleTitleA
CreateMutexA
GetDateFormatA
TerminateProcess
MapViewOfFile
GetStringTypeW
MultiByteToWideChar
GetVersionExA
DeleteFileA
FindResourceW
InterlockedExchange
HeapDestroy
GetLocaleInfoW
TlsAlloc
CompareStringA
GetLongPathNameA
GetFileTime
AllocConsole
GetConsoleOutputCP
GetPrivateProfileSectionA
TlsGetValue
RtlUnwind
HeapAlloc
GetConsoleMode
Sleep
SetUnhandledExceptionFilter
GetCurrentThreadId
GetPrivateProfileIntW
SetConsoleCtrlHandler
LeaveCriticalSection
WritePrivateProfileStructW
WriteConsoleOutputCharacterW
GetPrivateProfileStructA
CreateNamedPipeW
SetCurrentDirectoryA
GetTempPathA
ReadConsoleOutputAttribute
GetTickCount
GlobalFindAtomA
TransmitCommChar
IsValidCodePage
GetConsoleScreenBufferInfo
QueryPerformanceCounter
GetEnvironmentStrings
GetSystemTimeAsFileTime
VirtualFreeEx
GetCommandLineA
SetLastError
GetTimeZoneInformation
GetOEMCP
SetEnvironmentVariableA
SetThreadPriority
InterlockedExchangeAdd
UnlockFile
GetNamedPipeHandleStateW
GetProcessHeap
UnhandledExceptionFilter
GetCommandLineW
GetModuleFileNameW
GetModuleHandleA
RtlMoveMemory
FreeLibrary
ExitThread
lstrcat
CommConfigDialogW
LockFile
EnumDateFormatsExW
WriteConsoleA
GetFileType
GetACP
GetCPInfo
IsValidLocale
SystemTimeToFileTime
InitializeCriticalSection
WriteFile
GetModuleFileNameA
WaitForDebugEvent
WriteConsoleOutputA
VirtualAlloc
FindResourceExW
lstrcpyA
GetStringTypeA
GetNamedPipeInfo
GetConsoleCP
OpenFileMappingA
VirtualQuery
WideCharToMultiByte
GetEnvironmentStringsW
SetStdHandle
EnumResourceNamesW
TlsSetValue
comctl32
InitCommonControlsEx
ImageList_GetDragImage
gdi32
CreateColorSpaceW
StartDocW
GetColorSpace
StrokePath
SetRectRgn
GetArcDirection
GetDIBColorTable
CreatePenIndirect
UpdateICMRegKeyW
ResetDCW
FillRgn
StartDocA
GdiGetBatchLimit
Polyline
GdiPlayDCScript
user32
GetKeyNameTextA
SetMenuItemInfoA
RegisterClassA
SetRectEmpty
SwitchToThisWindow
DdeCreateStringHandleW
GetClipboardOwner
RegisterClipboardFormatA
CreateWindowExW
GetLastActivePopup
GetClassInfoExA
GetScrollPos
GetClassWord
RegisterClassExA
MsgWaitForMultipleObjectsEx
DestroyWindow
GetSystemMetrics
SendInput
UnregisterDeviceNotification
DefWindowProcW
TrackPopupMenu
SetProcessDefaultLayout
IsDialogMessageA
MessageBoxA
ExcludeUpdateRgn
GetDoubleClickTime
PackDDElParam
AnimateWindow
InSendMessage
DrawTextA
ShowWindow
DialogBoxIndirectParamW
SetScrollPos
Sections
.text Size: 176KB - Virtual size: 173KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 256KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 116KB - Virtual size: 142KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ