e:\evqvke.pdb
Static task
static1
Behavioral task
behavioral1
Sample
c49b03974230376307b8fc765b345982.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
c49b03974230376307b8fc765b345982.exe
Resource
win10v2004-20240226-en
General
-
Target
c49b03974230376307b8fc765b345982
-
Size
568KB
-
MD5
c49b03974230376307b8fc765b345982
-
SHA1
e74e6dea0bc9273ed71c50150e61559098dd7815
-
SHA256
c58bfbd2c7c7e93aca4b16fb00364f8c3694d3dfca20a7b53e6ce5ba72d474b0
-
SHA512
4c6e9c7ec77486a4a0914541a709017e9f23ac1530d6d121b296d60de8d593aa09bf3cf38da7361879a8e274744a4b85235508eb0998ea8c414ce9f506d00ce1
-
SSDEEP
12288:XqST2Az/+nUed2BTVJxGiA0tMjuaBe1o1ItU:aAmn9dqVJZtWO1H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c49b03974230376307b8fc765b345982
Files
-
c49b03974230376307b8fc765b345982.exe windows:4 windows x86 arch:x86
0434df1ce554f91e3ec9724907f73bbe
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
gdi32
SetDeviceGammaRamp
StartDocW
PatBlt
GetTextFaceA
UpdateColors
GetRasterizerCaps
comctl32
ImageList_Copy
ImageList_GetImageRect
ImageList_DragEnter
ImageList_GetIcon
CreateUpDownControl
ImageList_SetBkColor
InitCommonControlsEx
CreatePropertySheetPageA
CreateToolbarEx
GetEffectiveClientRect
ImageList_Remove
CreateMappedBitmap
DrawStatusText
ImageList_SetDragCursorImage
DestroyPropertySheetPage
ImageList_GetBkColor
user32
MonitorFromRect
GetWindowTextLengthW
RealChildWindowFromPoint
IsDlgButtonChecked
GetMessageTime
IsRectEmpty
RegisterClassA
CreateMDIWindowA
DestroyCaret
TranslateMessage
RegisterClassExA
GetMenuInfo
SetDebugErrorLevel
DrawIcon
GetKeyboardType
IsCharAlphaA
ChangeClipboardChain
GetWindowInfo
RegisterDeviceNotificationA
SetProcessWindowStation
GetUpdateRect
comdlg32
GetSaveFileNameW
ChooseColorW
PageSetupDlgA
ReplaceTextW
kernel32
OpenSemaphoreW
GetSystemInfo
GetLastError
WriteFile
GetUserDefaultLangID
WideCharToMultiByte
WritePrivateProfileSectionW
LCMapStringW
GetCurrentThreadId
SetStdHandle
GetEnvironmentStrings
SetLastError
RtlUnwind
GetPrivateProfileIntA
GetFileType
TlsFree
GetExitCodeThread
SetHandleCount
GetStartupInfoA
TlsAlloc
SetEnvironmentVariableA
CloseHandle
GetCommandLineA
HeapSize
EnumResourceLanguagesW
CreateNamedPipeW
GetACP
CompareStringA
GetShortPathNameA
CreateMutexA
GetNamedPipeHandleStateA
LocalHandle
FindClose
ReadConsoleOutputA
EnterCriticalSection
GetProcAddress
GetStringTypeA
GetTimeFormatA
GetLocaleInfoA
VirtualQuery
WriteProfileStringW
GetUserDefaultLCID
GetDiskFreeSpaceExW
ConvertDefaultLocale
GetDateFormatA
VirtualProtect
LeaveCriticalSection
ReadFile
OpenMutexA
MultiByteToWideChar
TlsSetValue
FlushViewOfFile
GetModuleFileNameA
WriteConsoleW
GetOEMCP
AllocConsole
TerminateProcess
SetFilePointer
GetEnvironmentStringsW
HeapCreate
FlushFileBuffers
IsValidCodePage
QueryPerformanceCounter
FreeEnvironmentStringsA
GetStringTypeW
IsBadWritePtr
LoadLibraryA
GetCPInfo
FillConsoleOutputCharacterA
SetTimeZoneInformation
GetLongPathNameA
FreeEnvironmentStringsW
LCMapStringA
GetCurrentThread
GetCurrentProcessId
ReadConsoleOutputCharacterA
SetConsoleScreenBufferSize
DeleteFileA
HeapFree
GetModuleHandleW
GetLocaleInfoW
GlobalCompact
EnumSystemLocalesA
GetModuleHandleA
HeapAlloc
LoadLibraryW
InitializeCriticalSection
OpenProcess
HeapDestroy
GetCalendarInfoA
GetSystemTimeAsFileTime
GetProfileIntA
GetCurrentProcess
DeleteCriticalSection
GetVersionExA
VirtualAlloc
ExitProcess
HeapReAlloc
IsValidLocale
FindResourceA
TlsGetValue
LockResource
GetProcAddress
GetTimeZoneInformation
GetPrivateProfileSectionW
InterlockedExchange
SetConsoleCP
GetTickCount
UnhandledExceptionFilter
CompareStringW
VirtualFree
GetStdHandle
Sections
.text Size: 160KB - Virtual size: 158KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 264KB - Virtual size: 261KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 112KB - Virtual size: 118KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ