E_S9I0A7.pdb
Static task
static1
Behavioral task
behavioral1
Sample
c246c4c43315e2fbd1329afc061fe92a.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c246c4c43315e2fbd1329afc061fe92a.exe
Resource
win10v2004-20231215-en
General
-
Target
c246c4c43315e2fbd1329afc061fe92a
-
Size
184KB
-
MD5
c246c4c43315e2fbd1329afc061fe92a
-
SHA1
8d091ca224961d8df7e604695f99974d964385bb
-
SHA256
5685ea8113c2123340878345be49dfa2b9bf6b6ec87b2e25aee2a4de655651de
-
SHA512
f3e4891b5dee1f94108666b2fbd3bfca7467c5a0f821cdc7b2cc0a812a4773a22e85135d75400522a5a351746c1f5c79e7ba2df59683b900a066314644f7e053
-
SSDEEP
3072:3c9yhUs+cPhN3lwtv52qy/dvMVAvZCNMeQfcU1Urovxtw88Ap2gq3:FUExqqhM+ZClrk3w8bQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c246c4c43315e2fbd1329afc061fe92a
Files
-
c246c4c43315e2fbd1329afc061fe92a.exe windows:6 windows x86 arch:x86
aad9d505723c21febd45ca5051940e0e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
PostQuitMessage
CreateWindowExW
DefWindowProcW
SetForegroundWindow
SetFocus
GetAsyncKeyState
GetCursorPos
GetWindowLongW
GetParent
DrawMenuBar
TrackPopupMenu
LoadMenuW
GetSubMenu
ModifyMenuW
SetMenuItemInfoW
AppendMenuW
MessageBoxW
GetSysColor
FillRect
SetTimer
GetSystemMetrics
LoadImageW
DestroyMenu
SystemParametersInfoW
GetMenuItemInfoW
KillTimer
PostMessageW
ShowWindow
UpdateWindow
FindWindowW
GetWindowTextW
LoadStringW
SetWindowTextW
DispatchMessageW
RegisterClassW
LoadBitmapW
GetMessageW
TranslateMessage
DrawIconEx
IsWindow
shell32
SHGetSpecialFolderPathW
ShellExecuteW
Shell_NotifyIconW
advapi32
RegSetValueExW
RegCreateKeyExW
RegEnumKeyExW
RegEnumValueW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegDeleteKeyW
RegDeleteValueW
kernel32
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
GetCurrentThreadId
HeapDestroy
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
HeapReAlloc
HeapAlloc
HeapSize
LeaveCriticalSection
EnterCriticalSection
OutputDebugStringA
FreeLibrary
LoadLibraryA
InitializeCriticalSection
GetModuleHandleW
GetCPInfo
GetACP
GetOEMCP
Sleep
VirtualAlloc
RtlUnwind
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
DeleteCriticalSection
WideCharToMultiByte
LCMapStringW
VirtualProtect
GetSystemInfo
VirtualQuery
lstrlenW
GetProcessHeap
lstrlenA
LocalFree
OutputDebugStringW
DeleteFileW
FindClose
FindFirstFileW
CloseHandle
LoadLibraryW
CreateProcessW
GetPrivateProfileIntW
ReleaseSemaphore
WaitForSingleObject
GetPrivateProfileStringW
GetVersionExW
CreateSemaphoreW
GetSystemDirectoryW
CreateMutexW
ReleaseMutex
lstrcmpiW
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
GetLastError
FreeEnvironmentStringsW
GetEnvironmentStrings
MultiByteToWideChar
FreeEnvironmentStringsA
GetModuleFileNameW
GetModuleFileNameA
GetStdHandle
WriteFile
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
GetSystemDefaultLCID
GetStringTypeExW
LocalAlloc
GetTempPathW
GetTempFileNameW
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
SetEndOfFile
GetConsoleMode
GetConsoleCP
SetFilePointer
SetStdHandle
CreateFileW
ReadFile
CreateThread
ExitThread
RaiseException
ExitProcess
GetModuleHandleA
GetProcAddress
SetUnhandledExceptionFilter
GetStartupInfoW
GetVersionExA
OpenFileMappingW
GetPrivateProfileSectionW
GlobalFree
GetFileSize
GlobalAlloc
LCMapStringA
FindFirstFileA
GetPrivateProfileStringA
lstrcmpiA
GetUserDefaultLangID
gdi32
CreateSolidBrush
GetObjectW
CreateCompatibleDC
BitBlt
SetTextColor
SetBkColor
GetTextAlign
SetTextAlign
TextOutW
CreateICW
SelectObject
GetTextExtentPoint32W
DeleteDC
CreateFontIndirectW
DeleteObject
winspool.drv
OpenPrinterW
GetPrinterW
GetPrinterDataW
EnumPrinterDriversW
GetPrinterDriverW
ClosePrinter
OpenPrinterA
GetPrinterDriverA
EnumPrinterDriversA
comctl32
ord17
Sections
.text Size: 171KB - Virtual size: 171KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE