FTTTGR.pdb
Static task
static1
Behavioral task
behavioral1
Sample
d0c3b3e467f21c5ae8880459b00227de.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d0c3b3e467f21c5ae8880459b00227de.exe
Resource
win10v2004-20240226-en
General
-
Target
d0c3b3e467f21c5ae8880459b00227de
-
Size
360KB
-
MD5
d0c3b3e467f21c5ae8880459b00227de
-
SHA1
a59454c16b265f924414df6f236115d31bddaa65
-
SHA256
c61835a93292a841c3d1ac076411c6182cfb52880f543c6df5f7533c00b3c25f
-
SHA512
10d476fd2346bbfa7b34aea886fe38e3b824db78774e8b2c0f8214f3b7feedc298a12c087dddd7d7a27499c8e41550589c6d4902673d9f24e7b664c985256b67
-
SSDEEP
6144:P67QhpFcifhYBmUx2Wx3IXKjqxwPzNOLuNE45yqcZqHobhwn66/mgz6kb827k+C:PjzlfhYD28S3wPJOLqEmmbenn/s29C
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource d0c3b3e467f21c5ae8880459b00227de
Files
-
d0c3b3e467f21c5ae8880459b00227de.exe windows:5 windows x86 arch:x86
2d5b8aa0b9c44d7fb0c1c4092a9fce18
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
powrprof
ReadGlobalPwrPolicy
IsPwrHibernateAllowed
user32
ShowCaret
GetWindowRect
InsertMenuA
GetClipboardFormatNameA
SetCursor
IsWindow
gdi32
GetDeviceCaps
GetObjectW
GetCharWidthW
GetPaletteEntries
GetBitmapBits
kernel32
AddConsoleAliasA
LoadLibraryA
HeapCreate
GetProcAddress
GetCurrentConsoleFont
GetProcessAffinityMask
DeleteVolumeMountPointW
GlobalFindAtomA
HeapWalk
EraseTape
FillConsoleOutputAttribute
GlobalAddAtomW
GetConsoleCursorInfo
SetFileAttributesW
LockFile
FindFirstFileA
GetLocaleInfoW
EnumSystemLocalesA
GetModuleHandleA
winspool.drv
FindNextPrinterChangeNotification
ole32
CoFreeUnusedLibrariesEx
wininet
RetrieveUrlCacheEntryStreamW
msvcrt
memset
Sections
.rda Size: 304KB - Virtual size: 302KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data1 Size: 20KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ