I:\CnZmqvkxnTi\HvriAwWfyIsMx\zrkqhfpqBlonl\BtslrbknkoiFFf\viAxydWlwKhDv.pdb
Static task
static1
Behavioral task
behavioral1
Sample
c82c67cefb0c39d203e3284eb4351a93.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c82c67cefb0c39d203e3284eb4351a93.exe
Resource
win10v2004-20240226-en
General
-
Target
c82c67cefb0c39d203e3284eb4351a93
-
Size
147KB
-
MD5
c82c67cefb0c39d203e3284eb4351a93
-
SHA1
c7fbd4f96bf19edbc55b825f0ab4badb3873b6a5
-
SHA256
c18646055f0b9e4eeda317c1342917ffb8f1f5ddf367b4d85b3f4b942694142e
-
SHA512
812e46d50d2a103d185cbcab2eb1a1c9ec69fde8bdebff89b8cf673f8b0fa974127cc687d89c6ed5a37885bebbdf1230e7d63902904d25a54882c72da489a56c
-
SSDEEP
3072:WrwE9WRHImvFUohzDPrtwPuGV7IQPPgOvCM3WgnmWD:WrJWRomNTc/V7LPPgOqMP5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c82c67cefb0c39d203e3284eb4351a93
Files
-
c82c67cefb0c39d203e3284eb4351a93.exe windows:5 windows x86 arch:x86
0482a077d3a3f59cd63374e89d8d8878
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
CreateDialogParamW
TileWindows
GetDlgItemInt
OpenInputDesktop
CreateDialogParamA
LoadStringW
CheckDlgButton
GetSysColor
GetSystemMetrics
GetMenuItemInfoW
ClipCursor
LockWindowUpdate
GetMenu
LoadIconA
LoadMenuW
SendMessageTimeoutW
ToUnicodeEx
RegisterHotKey
SetDlgItemInt
FillRect
GetClassInfoExA
GetAsyncKeyState
GetMessageA
SetScrollRange
TabbedTextOutW
GetClassLongW
DrawFocusRect
LoadMenuA
IsWindow
GetIconInfo
msvcrt
exit
gdi32
BeginPath
EnumFontFamiliesExW
CreatePalette
IntersectClipRect
DeleteObject
GetNearestPaletteIndex
GetLayout
CreateFontW
GetDIBits
GetCurrentObject
CreateHalftonePalette
UnrealizeObject
GetWindowOrgEx
ntdll
memset
comdlg32
CommDlgExtendedError
ReplaceTextW
ChooseFontW
GetSaveFileNameA
shlwapi
StrToInt64ExA
StrStrA
ChrCmpIA
UrlGetPartW
PathSearchAndQualifyA
kernel32
GetFileAttributesW
CreateNamedPipeW
CreateEventW
SetThreadLocale
GlobalDeleteAtom
GetDateFormatW
CompareStringW
CreatePipe
ConnectNamedPipe
QueryDosDeviceW
EnumResourceTypesA
lstrcmpiW
lstrcpynA
SetCurrentDirectoryA
lstrlenW
lstrcatA
GetTickCount
DefineDosDeviceW
Exports
Exports
?wyddWsuhrmqkl_wns_PIZP@@YGXPAK@Z
?__t___kum_nlzJ_U@@YGDH@Z
?adnnfRWX_WewcdSHi_a@@YGFHK@Z
?_LPP__ECIJf@@YGEN@Z
?__HHCHSltr___xw_STKgrd@@YGXPAJG@Z
?iP_Y_K_N@@YGFMK@Z
?ipu_zhegfdZvqo@@YGPAXPAHPAI@Z
?__afkkzURMTFN@@YGPAXPAM@Z
?_DS__V___RSSVTDEKQKS_f@@YGPADPA_NPAN@Z
?__mb_NEX_Z@@YGXMI@Z
?_uqriZ_Sipfs_em_@@YGPAFFK@Z
?srdn_X_Y_CK_@@YGXM@Z
?uVTPTUhmhiIYR@@YG_N_NPAG@Z
?KA_Q_APm@@YGGF@Z
?bl_QYqr_vNHAMU@@YGNH@Z
?KRFWAKg@@YGEH@Z
?NVPQn_bb@@YGDI@Z
?n_jegdkbxhbJO_V_@@YGXPAH@Z
?a__xlavP@@YGXKPAJ@Z
?ckfm_ixvqkb_tcdpnopm_y@@YGMHD@Z
?OAwr_f_kna_@@YGPADE@Z
?Qv_c_bkxqjt_i_qmo@@YGMMM@Z
?_pajcdhyKFPL_Y_A__FS_L@@YGPAFPAFD@Z
?WEkp___nLF__yppsWU@@YGPAMPAHPAD@Z
?I_BJ_vkuyfJERJ_gkc@@YGPA_NN@Z
?w_l_azK_UF@@YGHMPAI@Z
?reur_d__zx_zamlaj@@YGPAGGK@Z
?_TVRY_Pu_az@@YGPAKPAMPAJ@Z
?IK_NQ_BZUYzm____@@YGPAKPAN@Z
?Y_YUipfqyisI@@YGPAII@Z
?TPIOE___W@@YGJJN@Z
?__R_AYtvx_@@YGMJ@Z
?V__A_OGej_aKueimw@@YGFG@Z
?JLYAKxyy_tvg__qb@@YGPAMF@Z
?K_X_BRKMAOSWYK____@@YGPAXIPAH@Z
?XMMBJCeh_xo_ZV_MZQ@@YGXF@Z
?EPNJ_ZX@@YGPAIPAEJ@Z
?hB_DPGGtadm__ouhwyq__Q@@YGDIG@Z
?DDYFZ_ALYDAALWIMG@@YGF_NPAF@Z
?bp_msum_qaQGTZ_R_EJM@@YGDGG@Z
?xyOEWyxjdzQLv_XI_W@@YGXIH@Z
?fqcqqUA_E_VTQ_@@YGPAEH@Z
?_duDQt_vMYDSiGW@@YGNE@Z
?_MFUJX_LFhflnQSM@@YGPAJI@Z
?XY_FY_NL_T_@@YGDPANPAD@Z
?jxsdkbhfg__p_@@YGDM@Z
?tjfmP__DZY__Wkh_y_@@YGHKF@Z
?_mucrrv_s_g_P_@@YGFPAIM@Z
?quspfuqkwmwrC_H__Jh_j_@@YGMKN@Z
?_E_ZXG_JNazhazqefdiwe@@YGJPAK@Z
?mmwnkxvm_oMRghygD@@YGPA_NNE@Z
?_ol_lmlPOB_LM_v_lqi@@YGXJ@Z
?oyUNgNDW_ikdL@@YGFPAH@Z
?hbolKGPNB_JRn@@YGPAXEPA_N@Z
?CDNLSCPXFT_pb_q@@YGGE@Z
?C___JBEPCNGW@@YG_NIPAK@Z
?NSGDtoujbvxw@@YGHF@Z
?dmGY__NYZrXUNPXI@@YGHPAH@Z
?zmznvo_@@YGIN@Z
Sections
.text Size: 86KB - Virtual size: 85KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.icode Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 33KB - Virtual size: 189KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ldata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 531B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ