S:\QvRoNb\xfQRbt\lGvtdecj\myyL\nefFi.pdb
Static task
static1
Behavioral task
behavioral1
Sample
c7d523667fc23784541433d637b42d79.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c7d523667fc23784541433d637b42d79.exe
Resource
win10v2004-20240226-en
General
-
Target
c7d523667fc23784541433d637b42d79
-
Size
92KB
-
MD5
c7d523667fc23784541433d637b42d79
-
SHA1
3595e4cb0be2675b02650be5be734ad5a4515e74
-
SHA256
1b54a96a47dbef467442a415f0e3059daf88bd4c4148e2332dd43f1c35d73b88
-
SHA512
4905adcdfcaa231f390604b86bef5ac38b2c26b7dc9bba4ff15d76b467cbc88decdeae467995fe5dd600c5408e1816f4ebffe8b9492f8bd315d88f19467c7a03
-
SSDEEP
1536:GT4MidqnlIH+A5aDkymUUWFzp499PWefWnKdfgMRqHsaxAqGouLy:mtoeqymUSPW4fgMklGoH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c7d523667fc23784541433d637b42d79
Files
-
c7d523667fc23784541433d637b42d79.exe windows:5 windows x86 arch:x86
b11ab63cdd84635abbab41e64c7e1aca
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
ntdll
memset
kernel32
SetLastError
lstrlenW
lstrlenA
GetCurrentThread
IsBadWritePtr
IsValidCodePage
lstrcmpA
LoadLibraryW
FreeEnvironmentStringsW
GetStartupInfoA
ReadFile
GetCPInfo
ResumeThread
GetEnvironmentStringsW
GetSystemTime
SetThreadAffinityMask
gdi32
AddFontResourceW
ScaleWindowExtEx
WidenPath
OffsetRgn
CreateFontA
PathToRegion
SelectClipRgn
CreatePenIndirect
shlwapi
StrCmpW
user32
SetDlgItemInt
OpenDesktopW
IsWindowEnabled
GetClassLongW
TranslateAcceleratorA
GetMenu
CreateMenu
ScreenToClient
GetDlgCtrlID
IsDlgButtonChecked
ChildWindowFromPointEx
TabbedTextOutW
MessageBoxExW
Exports
Exports
?BlkmmyczfopxlusxuvbCvn@@YGPAMPAF@Z
?VukjuPnmsorese@@YGPAXD@Z
?OjUitackGsnctdgp@@YGPAXK@Z
?GxcftztsbzujqyVqv@@YGPADPAI@Z
?AztjRvovdffjeboyu@@YGFPAGK@Z
?SdixlaVQckj@@YGXPANI@Z
?OqFpikvjaTsgueyxtjuo@@YGPADDE@Z
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 77KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 824B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ