d:\antivirusversion2\regentries\release\RegEntries.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ce1c22205ac12f2216dc10f7fbf3e950.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ce1c22205ac12f2216dc10f7fbf3e950.exe
Resource
win10v2004-20240226-en
General
-
Target
ce1c22205ac12f2216dc10f7fbf3e950
-
Size
156KB
-
MD5
ce1c22205ac12f2216dc10f7fbf3e950
-
SHA1
aaa11c2c730dff5b2c79ff6460e2ae7f66a3e0b6
-
SHA256
37e6487d51db7a74cc4719d1624f12115f22bee913cfa8752e2c794534c1071b
-
SHA512
132b99deba6a37dc208d1998a22e50a1b9d208db491d19892dd86d48b0c8bef41bbfcc314d87e9ed3329e2f9853f6f5662dc683cd25f8eb8c8cb96b2ddb75d26
-
SSDEEP
3072:/HzKFKusl3cLys3N5OWQLEPg22SDADeak7dJHB/AdGa:/T+seX3N5OWQLEP8SsQLH5Ad7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce1c22205ac12f2216dc10f7fbf3e950
Files
-
ce1c22205ac12f2216dc10f7fbf3e950.exe windows:4 windows x86 arch:x86
e4bb3237de31a57bdeff64a038b24a29
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mfc80
ord2392
ord2408
ord2413
ord299
ord2396
ord2398
ord3441
ord572
ord2400
ord1489
ord2394
ord2410
ord587
ord2390
ord354
ord934
ord605
ord930
ord932
ord928
ord2098
ord923
ord1650
ord5233
ord1594
ord5235
ord4243
ord1794
ord5960
ord2983
ord1600
ord4282
ord4722
ord3641
ord3403
ord3324
ord4109
ord4580
ord5529
ord5203
ord6090
ord4262
ord4185
ord6065
ord4486
ord6275
ord2164
ord3949
ord5073
ord2644
ord1908
ord3709
ord5152
ord3719
ord4244
ord3718
ord1401
ord2168
ord304
ord2533
ord3946
ord748
ord3989
ord2646
ord1617
ord2540
ord2415
ord578
ord310
ord2862
ord5912
ord2714
ord6724
ord266
ord762
ord1486
ord2372
ord3333
ord4481
ord2838
ord5566
ord5213
ord5230
ord4568
ord3948
ord2248
ord5226
ord5224
ord2931
ord1920
ord3832
ord5382
ord6219
ord5102
ord1010
ord3806
ord5583
ord2018
ord2063
ord4326
ord6276
ord3801
ord6278
ord4014
ord4038
ord4541
ord3683
ord566
ord757
ord3830
ord1054
ord5975
ord1063
ord501
ord709
ord2469
ord3182
ord1084
ord2371
ord4749
ord1123
ord784
ord556
ord744
ord5097
ord6310
ord1452
ord4035
ord2657
ord1903
ord2403
ord781
ord2385
ord6703
ord2387
ord2405
ord2178
ord2172
ord1522
ord6279
ord3164
ord3802
ord6277
ord3345
ord4967
ord4261
ord1362
ord2991
ord5182
ord5175
ord5214
ord4212
ord1964
ord4232
ord4735
ord1656
ord1402
ord4890
ord1655
ord5915
ord2020
ord1599
ord297
ord6725
ord1671
ord5200
ord1545
ord1670
ord2537
ord2086
ord1551
ord2731
ord2835
ord4307
ord1620
ord764
ord1207
msvcr80
_invoke_watson
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
_except_handler4_common
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
_decode_pointer
_onexit
_lock
malloc
free
getenv
_setmbcp
memset
_CxxThrowException
__CxxFrameHandler3
_unlock
_controlfp_s
__dllonexit
_encode_pointer
kernel32
OutputDebugStringA
GetLastError
MultiByteToWideChar
lstrlenA
InterlockedExchange
GetModuleFileNameA
WideCharToMultiByte
Sleep
InterlockedCompareExchange
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
InterlockedDecrement
CreateProcessA
DeleteFileA
WaitForSingleObject
CloseHandle
HeapFree
GetProcessHeap
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
GetExitCodeProcess
user32
SendMessageA
GetParent
EnableWindow
IsIconic
AppendMenuA
wsprintfA
DrawIcon
GetSystemMenu
GetClientRect
GetSystemMetrics
LoadIconA
advapi32
RegCloseKey
RegSetValueExA
RegCreateKeyExA
shell32
ShellExecuteA
comctl32
InitCommonControlsEx
ole32
CLSIDFromString
CoUninitialize
CoInitialize
OleRun
CoCreateInstance
CLSIDFromProgID
oleaut32
SysFreeString
SysAllocStringByteLen
SysStringByteLen
VariantInit
VariantChangeType
VariantClear
GetErrorInfo
SysAllocString
Sections
.text Size: 56KB - Virtual size: 54KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ