Q:\krlr\xtckhhz\zjOkEx.pdb
Static task
static1
Behavioral task
behavioral1
Sample
215857808.malware.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
215857808.malware.exe
Resource
win10v2004-20240226-en
General
-
Target
c0df768530143286dcdeedf21187c6a3
-
Size
107KB
-
MD5
c0df768530143286dcdeedf21187c6a3
-
SHA1
d1594d38383d0331aaba6462d7995448b2a0263e
-
SHA256
15db65e94d2eb2f430899817dcd7b0f02d4e16d180eab622ad692dda91918ced
-
SHA512
126a721532a8231c10b28cbfb96a9062509715d59be2a849b7b313d8a7c0011594f5cb255a59566fd9e99e11268e26ad58815ade9975a1f712802a680b986fec
-
SSDEEP
3072:rpUCVTrCMEcyrYrOHc7LFZlSVu75FP0nF:qCVTrscyEdZ2OmF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/215857808.malware.sample
Files
-
c0df768530143286dcdeedf21187c6a3.zip
-
215857808.malware.sample.exe windows:5 windows x86 arch:x86
db30d002341eaf7770f73e2d651f8ff6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
comctl32
PropertySheetW
ImageList_GetImageCount
kernel32
DefineDosDeviceW
OpenSemaphoreW
lstrlenW
GetCurrentThread
GetComputerNameA
SearchPathW
FreeLibrary
CreateMutexA
EnumSystemLocalesA
SetFileAttributesA
DeleteAtom
SetStdHandle
GlobalLock
GetThreadPriority
shlwapi
StrCatBuffW
PathGetArgsW
user32
OpenDesktopW
LoadCursorW
LockWindowUpdate
SetScrollPos
LoadStringA
DestroyCursor
GetWindowRect
RegisterWindowMessageW
GetScrollPos
GetMenuInfo
wsprintfW
FindWindowW
EnableMenuItem
SendMessageW
gdi32
SetRectRgn
RestoreDC
SetLayout
RectVisible
CreatePatternBrush
Escape
CreateDIBitmap
Exports
Exports
?OzkvcuoWuDj@@YGIPAN@Z
?etgEkawJpMyBjtybRbynzm@@YGNKD@Z
?awqsakwaGuceTukw@@YGJPAIPAD@Z
?izwJtRcXmzvhkxosMd@@YGEM@Z
?Zbtubzf@@YGEPADF@Z
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xdata Size: 78KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ