C:\source\wdautoex\WX\Win32\Release\WdAutoEx.pdb
Static task
static1
Behavioral task
behavioral1
Sample
c7996b19c452f5d98e6518d06e08b6cf.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
c7996b19c452f5d98e6518d06e08b6cf.exe
Resource
win10v2004-20240226-en
General
-
Target
c7996b19c452f5d98e6518d06e08b6cf
-
Size
574KB
-
MD5
c7996b19c452f5d98e6518d06e08b6cf
-
SHA1
995e6ea9b9b2d0e9b16b8c4d2df0a8491ad0d4d3
-
SHA256
12437bce4c6b0855dd8f4d34c850d21578d61b3740506a5414823ebf339eae4f
-
SHA512
dcb7bb01b89acd85c5a56327a054894e180f7e9fbab7b4bfdb9c6b1d93902fe2d62505b2cfe5f7e66cf2fbc3b320e4d63f6c4fbcfc2098d459d1958007b1e9b5
-
SSDEEP
12288:pCcD+P1ApeAypve5I088zL8TrY65KMH9rCUqhzd2xIR8QVM:8aKqAAypf78UTD5hH9rQzRvVM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c7996b19c452f5d98e6518d06e08b6cf
Files
-
c7996b19c452f5d98e6518d06e08b6cf.exe windows:6 windows x86 arch:x86
8d3851c7d6f9943798db6f4f6a7f5bee
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
comctl32
ord17
mpr
WNetEnumResourceW
WNetGetUniversalNameW
WNetOpenEnumW
WNetCloseEnum
uxtheme
SetWindowTheme
kernel32
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
WideCharToMultiByte
MultiByteToWideChar
GetLastError
LoadLibraryW
GetFileInformationByHandle
GetLogicalDriveStringsW
GetVolumeInformationW
WriteFile
ReadFile
SetFilePointer
LockFile
LockFileEx
UnlockFile
UnlockFileEx
FlushFileBuffers
SetEndOfFile
SetFileValidData
SetErrorMode
SetFileTime
SetLastError
GetFileTime
SystemTimeToFileTime
FileTimeToSystemTime
CreateFileW
Sleep
DeleteFileW
GetFileAttributesW
CreateDirectoryW
RemoveDirectoryW
FindFirstFileW
FindClose
SetFileAttributesW
FindFirstFileExW
FindNextFileW
GetTempPathW
GetCurrentDirectoryW
GetTempFileNameW
GetFullPathNameW
GetDriveTypeW
QueryDosDeviceW
FreeLibrary
OpenProcess
TerminateProcess
GetModuleFileNameW
InitializeCriticalSection
CompareStringW
CompareStringA
GetPrivateProfileStringW
GetTimeZoneInformation
GetVersionExW
GetCurrentProcess
CreateProcessW
LCMapStringW
GetPrivateProfileIntW
SetEnvironmentVariableW
GetExitCodeProcess
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
HeapReAlloc
SetStdHandle
WriteConsoleW
DecodePointer
GetStringTypeW
HeapAlloc
HeapFree
GetACP
GetModuleHandleExW
ExitProcess
GetModuleFileNameA
GetStdHandle
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
GetFileType
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
RaiseException
RtlUnwind
LocalFree
LockResource
LoadResource
FindResourceW
FormatMessageW
GetProcAddress
GetModuleHandleW
CloseHandle
SetEnvironmentVariableA
GetProcessHeap
HeapSize
GetConsoleCP
GetConsoleMode
SetFilePointerEx
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
IsDebuggerPresent
user32
GetDlgItemTextW
IsDlgButtonChecked
CheckDlgButton
GetDlgItem
SetDlgItemTextW
SetWindowPos
GetParent
DialogBoxParamW
EndDialog
IsWindow
MessageBoxW
CharUpperBuffW
CharUpperW
SendDlgItemMessageW
LoadStringW
FillRect
DestroyWindow
ReleaseDC
DrawTextW
GetDC
UpdateWindow
ShowWindow
SendMessageW
GetClientRect
GetSystemMetrics
CreateWindowExW
RegisterClassW
LoadIconW
DefWindowProcW
SetWindowTextW
gdi32
GetStockObject
SetROP2
LineTo
MoveToEx
CreatePen
DeleteObject
SelectObject
CreateFontIndirectW
SetTextColor
SetBkMode
CreateSolidBrush
advapi32
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
shell32
SHGetPathFromIDListW
ShellExecuteExW
ShellExecuteW
SHBrowseForFolderW
ole32
OleInitialize
Exports
Exports
CommandeComposante
Sections
.text Size: 181KB - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 91KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ