N:\xbkihwRvD\SywxRxWpRg\dxhBXwsCev.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ca73346f1438ad678883acbfd125e5d9.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ca73346f1438ad678883acbfd125e5d9.exe
Resource
win10v2004-20240226-en
General
-
Target
ca73346f1438ad678883acbfd125e5d9
-
Size
147KB
-
MD5
ca73346f1438ad678883acbfd125e5d9
-
SHA1
7b2fab20661159fb1ae4fc946d724e0dd230eaf4
-
SHA256
2d4c3ff694e2752829b1bea549b9849f5cb64457b78233a95eb2c762958a4814
-
SHA512
ef5fa586618e498f327ea0db3d26efee192c02fafd0dabffd6657530b541ed6c3115312ce4c9654ad13664ef222cd45f6de76989c5a2efc021c58e13fdd5daaf
-
SSDEEP
3072:qgqt2RMhdccDUStFkK7FpHShUQkymX65vJfzV3jrI:qga2m7xD3FzvmUQkf613jrI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ca73346f1438ad678883acbfd125e5d9
Files
-
ca73346f1438ad678883acbfd125e5d9.exe windows:5 windows x86 arch:x86
4071074f3c9c36947c7cd3d15ae002a1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
GetMessageTime
DefFrameProcA
AdjustWindowRectEx
GetKeyState
GetLastActivePopup
TranslateMessage
SetPropW
CopyRect
CharUpperBuffW
DragObject
FindWindowA
GetWindowModuleFileNameW
DrawFocusRect
SetCursor
TrackPopupMenuEx
GetMenuCheckMarkDimensions
RegisterClassA
GetMessageW
DialogBoxParamA
IntersectRect
DialogBoxIndirectParamA
AttachThreadInput
RegisterHotKey
LoadIconA
MonitorFromRect
ShowWindowAsync
wsprintfW
SendMessageA
DestroyCursor
MessageBoxW
wsprintfA
RegisterWindowMessageW
GetGUIThreadInfo
SwitchToThisWindow
LoadStringA
MapWindowPoints
GetCaretBlinkTime
GetUserObjectInformationW
CopyImage
DefDlgProcA
GetMenuStringA
LookupIconIdFromDirectory
DrawStateA
UpdateWindow
GetTopWindow
GrayStringW
SetWindowRgn
EnumThreadWindows
LoadImageA
ToUnicodeEx
LoadIconW
RemoveMenu
RegisterClassExW
GetWindowDC
GetMonitorInfoW
DestroyCaret
IsWindowEnabled
CharNextA
SetFocus
DialogBoxIndirectParamW
RegisterClassW
DestroyIcon
GetNextDlgTabItem
EnableWindow
EnumWindows
GetDlgItem
GetScrollRange
OpenDesktopW
GetMessageExtraInfo
IsCharLowerA
GetWindowPlacement
SetWindowLongW
GetClientRect
MapVirtualKeyA
InsertMenuItemW
SystemParametersInfoW
CheckMenuItem
GetDlgCtrlID
GetDCEx
SetMenuDefaultItem
IsRectEmpty
CharLowerA
SendMessageTimeoutA
InflateRect
LoadStringW
LoadAcceleratorsW
ShowWindow
ReleaseDC
GetClassLongA
DispatchMessageW
DestroyAcceleratorTable
SetMenuItemBitmaps
GetFocus
OemToCharA
SetScrollInfo
GetMessageA
LoadMenuA
ActivateKeyboardLayout
ShowOwnedPopups
wvsprintfA
LoadCursorW
GetClassInfoExW
EndDialog
GetKeyboardType
BringWindowToTop
EnableScrollBar
SendMessageW
GetMenuStringW
InSendMessage
GetNextDlgGroupItem
IsDialogMessageA
RemovePropW
WindowFromPoint
DrawTextW
GetMenuItemCount
ChangeMenuW
CharPrevA
DrawFrameControl
OpenInputDesktop
SystemParametersInfoA
PostMessageW
LoadAcceleratorsA
MapVirtualKeyW
CreatePopupMenu
shlwapi
StrToIntW
kernel32
AddAtomW
GlobalFlags
SetupComm
CopyFileW
MoveFileW
CreateDirectoryA
CloseHandle
FileTimeToLocalFileTime
FindClose
GetCommTimeouts
LockFile
OpenFileMappingW
SetFileAttributesW
LockResource
VerSetConditionMask
HeapAlloc
RaiseException
SetThreadContext
WaitForSingleObjectEx
GetFileSize
SetThreadExecutionState
GetUserDefaultLangID
CompareStringA
LCMapStringA
CreateFileMappingA
DeleteFileW
OpenEventW
GetComputerNameExW
FlushFileBuffers
CreateNamedPipeA
GetAtomNameW
OpenEventA
SetCommBreak
ReleaseSemaphore
SetUnhandledExceptionFilter
GetProcessHeap
GetComputerNameW
GetSystemDirectoryA
QueryPerformanceCounter
GetModuleFileNameA
GetThreadPriority
FindFirstFileW
QueryDosDeviceW
SearchPathW
GetTimeFormatA
DisconnectNamedPipe
GetCommModemStatus
CreateMailslotW
GetACP
WinExec
EnumResourceLanguagesA
HeapFree
EscapeCommFunction
lstrcmpiA
LoadLibraryA
GetProcAddress
SuspendThread
SetErrorMode
GetCurrentThreadId
comdlg32
GetSaveFileNameA
ChooseFontW
GetOpenFileNameW
ReplaceTextW
msvcrt
_controlfp
isupper
__set_app_type
mbstowcs
__p__fmode
clearerr
towupper
memset
wcstok
__p__commode
gets
_amsg_exit
toupper
fread
_initterm
_ismbblead
iswdigit
strspn
_XcptFilter
fclose
isspace
strncpy
qsort
wcstod
_exit
bsearch
wcslen
wcstol
strtoul
strtol
_cexit
strrchr
sscanf
floor
wcscspn
isprint
fgets
setlocale
localtime
gmtime
perror
isxdigit
clock
isdigit
vsprintf
__setusermatherr
puts
__getmainargs
Exports
Exports
?GenericOutputInfoYSUh@@YGK_KHE[D
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 21KB - Virtual size: 145KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 114KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ