g:\vmxltsr.pdb
Static task
static1
Behavioral task
behavioral1
Sample
c987871a9582bef9ed46abac04581182.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
c987871a9582bef9ed46abac04581182.exe
Resource
win10v2004-20240226-en
General
-
Target
c987871a9582bef9ed46abac04581182
-
Size
628KB
-
MD5
c987871a9582bef9ed46abac04581182
-
SHA1
51f19144b042f008e2c489c31bf5b54fac795ef5
-
SHA256
bf5a57706354a653f4420c945065ad66ec66f547258083dfbdb4a912037c57f5
-
SHA512
fa221a19f19c5332d2a7e152cb2058e55d8c44a3305aef71f17b771a76a29c459ac34017fdd0fbededf6c1cf8c92fe3947162e9666889b0039f5000b25bb05bc
-
SSDEEP
12288:Md6YKv7b91DK4yB4V00avhNRr/eLTDtTsPvIYllllll+llllllllRKlllflllQr9:O8d1DK4y032e/5Y2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c987871a9582bef9ed46abac04581182
Files
-
c987871a9582bef9ed46abac04581182.exe windows:4 windows x86 arch:x86
89ca37a59c2bc7730ab44cf372b10ade
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
comdlg32
PrintDlgW
GetFileTitleA
PageSetupDlgW
user32
MessageBoxW
EnumDisplaySettingsW
SetClassLongW
WaitMessage
DestroyWindow
EnumPropsExA
DefWindowProcA
CreateWindowExA
ShowWindow
FindWindowA
SetActiveWindow
RegisterClassA
LookupIconIdFromDirectoryEx
EnumDisplayMonitors
GetKeyboardLayoutNameW
VkKeyScanW
DdeInitializeA
SetMessageExtraInfo
DestroyIcon
CallWindowProcW
SetThreadDesktop
ModifyMenuW
DdeGetLastError
LoadKeyboardLayoutW
DestroyAcceleratorTable
RegisterClassExA
MapWindowPoints
GetClassInfoExA
comctl32
ImageList_GetFlags
DrawStatusText
InitCommonControlsEx
ImageList_Create
GetEffectiveClientRect
ImageList_SetIconSize
ImageList_DragShowNolock
wininet
SetUrlCacheConfigInfoW
kernel32
GetVolumeInformationA
GetCalendarInfoA
GetCurrentThread
GetFileSize
ExitProcess
GetUserDefaultLangID
CreateNamedPipeW
GetTickCount
OpenMutexA
GetVersionExA
GetCommandLineW
WriteConsoleOutputCharacterA
GetTimeZoneInformation
SetUnhandledExceptionFilter
GetProfileSectionA
CompareStringW
OpenFileMappingW
GetCurrentProcessId
GetProcAddress
GetModuleFileNameA
TlsSetValue
GetTimeFormatA
FreeEnvironmentStringsA
GetWindowsDirectoryA
GetShortPathNameW
TlsFree
GetCurrentThreadId
GetDriveTypeW
GetPriorityClass
GetConsoleCP
GetACP
CreateWaitableTimerW
SetEnvironmentVariableA
GetCompressedFileSizeA
GetModuleHandleA
HeapCreate
GetDateFormatA
GetConsoleOutputCP
InterlockedExchange
RemoveDirectoryA
InterlockedIncrement
GetProfileStringW
IsValidLocale
GetPrivateProfileStringW
CreateFileA
VirtualFree
FlushFileBuffers
WritePrivateProfileSectionW
CopyFileExA
IsValidCodePage
GetConsoleMode
WriteFile
IsDebuggerPresent
GetFileAttributesA
GetPrivateProfileIntA
GetSystemTimeAsFileTime
LeaveCriticalSection
GlobalGetAtomNameA
DeleteCriticalSection
WriteConsoleA
CloseHandle
QueryPerformanceCounter
EnterCriticalSection
FileTimeToSystemTime
MultiByteToWideChar
GetCurrentProcess
VirtualQuery
HeapDestroy
EnumCalendarInfoExW
InitializeCriticalSection
SetFileTime
GetProcessHeap
GetEnvironmentStrings
GetNumberFormatW
CompareStringA
TerminateProcess
LoadLibraryA
SetStdHandle
TlsAlloc
HeapReAlloc
GetEnvironmentStringsW
ReadFile
LCMapStringA
SetLocaleInfoW
RtlUnwind
lstrcpynA
WideCharToMultiByte
SetFilePointer
GetStringTypeW
WriteProfileSectionW
HeapAlloc
LockFile
HeapSize
GetCommandLineA
HeapFree
FreeEnvironmentStringsW
SetConsoleCtrlHandler
lstrcmpiA
GetCPInfo
InterlockedDecrement
TlsGetValue
SetLastError
lstrcmp
UnhandledExceptionFilter
OpenFile
GetStringTypeA
EnumCalendarInfoA
ReleaseSemaphore
GetModuleFileNameW
WaitForSingleObject
GetLocaleInfoA
CreateMutexA
WriteConsoleW
FreeLibrary
GetLastError
GetUserDefaultLCID
ReadConsoleW
GetStartupInfoW
LCMapStringW
GetLocaleInfoW
GetShortPathNameA
ReadConsoleInputW
GetStartupInfoA
VirtualAlloc
Sleep
SetHandleCount
GetFileType
GetStdHandle
EnumSystemLocalesA
GetOEMCP
GetLongPathNameA
SetThreadLocale
shell32
SHQueryRecycleBinW
ShellAboutA
SHAddToRecentDocs
ShellExecuteExA
SHGetPathFromIDListA
advapi32
RegQueryValueW
RegCreateKeyExA
LookupAccountSidW
RegCreateKeyExW
CryptGenRandom
Sections
.text Size: 192KB - Virtual size: 189KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 256KB - Virtual size: 255KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 112KB - Virtual size: 139KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ