T:\hkhwdRCpvdV\dzeopBD\vpbrlteolasOVm\mhfakitvqhmb\WjKbxvE.pdb
Static task
static1
Behavioral task
behavioral1
Sample
e209a8ca409aa0a3fc00bba0e90b27bd.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
e209a8ca409aa0a3fc00bba0e90b27bd.exe
Resource
win10v2004-20240226-en
General
-
Target
e209a8ca409aa0a3fc00bba0e90b27bd
-
Size
147KB
-
MD5
e209a8ca409aa0a3fc00bba0e90b27bd
-
SHA1
375fb8ec76797166901a9c1d0f1f305f6692c435
-
SHA256
7c3aa2e7664b3043fb6c4ca7e577f590275c093155348d1af1b3b7b3aebde371
-
SHA512
46fd957df1ecb1903d4ded1378870c61095d9c80909573cc8f0c67376a5d2c0413b265b974ed69fe06855079bac7affd5578053a2bcf41117e3dccd98b73c80d
-
SSDEEP
3072:S21KYJZgv549jzf/o0E7pJs4/tVXpscgkvnM+BVC1oLYy3:SzYJZ+GhFO84v3ZfMHol
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e209a8ca409aa0a3fc00bba0e90b27bd
Files
-
e209a8ca409aa0a3fc00bba0e90b27bd.exe windows:5 windows x86 arch:x86
94e380cf2bdc381853d2dfbfcee84657
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
comctl32
ImageList_Remove
ImageList_Read
CreatePropertySheetPageW
user32
CreateCaret
GetNextDlgTabItem
SetWindowPlacement
OpenDesktopW
BeginPaint
IsWindow
GetDlgItemTextW
SendInput
DefDlgProcW
InsertMenuA
GetMenuItemRect
CreateDialogParamA
SetCursorPos
CheckDlgButton
ShowCaret
LoadAcceleratorsA
EndDialog
EnumChildWindows
GetActiveWindow
CharLowerW
SendMessageTimeoutW
GetMenuItemCount
SetScrollPos
GetMenu
GetUpdateRect
MessageBoxExW
IsCharLowerA
CharNextExA
kernel32
UnhandledExceptionFilter
OpenSemaphoreW
HeapValidate
VirtualFree
VirtualAlloc
lstrcatW
SetFilePointer
lstrcmpiW
GetSystemWindowsDirectoryW
CompareStringW
GlobalMemoryStatus
LoadLibraryA
lstrlenA
SetPriorityClass
TransactNamedPipe
LockResource
lstrlenW
GetFullPathNameA
shlwapi
StrStrIA
UrlGetPartW
ChrCmpIA
PathSearchAndQualifyA
StrToIntA
StrFormatByteSizeA
ntdll
memset
msvcrt
exit
gdi32
StretchDIBits
CreateFontW
CreateBitmapIndirect
CreateDIBSection
BeginPath
SetStretchBltMode
SetWindowOrgEx
LineDDA
PtVisible
FillRgn
IntersectClipRect
PtInRegion
Exports
Exports
?DY_ORHH_S@@YGPAID@Z
?xyo__VJJVGUq__e@@YGPAFE@Z
?__FPA_RACvngBO@@YGDPAJ@Z
?tuxmfmRBM__FbemwdtC@@YGPAMPAN@Z
?r_hN_YOHH@@YGEPAEJ@Z
?Vf_dxhycBDDFzgqhux_gzB@@YGXEJ@Z
?_PMJPPyi_jO__WG_GKP@@YGGJ@Z
?kSCU_DG_RXLGVXKN_TZJBH@@YGHM@Z
?ejjrz_mnbd@@YGPAFK@Z
?zgvieSZAN_PP@@YGGK@Z
?nmafim_NIDo____laP_ctq@@YGHIE@Z
?_R_BKOp__yhewe@@YGPAFPAD@Z
?ZX_R_I_@@YGIPAJ@Z
?bbv_zkgig_grxz__oyqbc_@@YGPAKI@Z
?_ulpx_GHVySLK@@YGEJ@Z
?efusBSExrdzdTz_hy@@YGPAHPAIG@Z
?EKDvyouUJH_OIV_G_@@YGPAMGPAD@Z
?mr_aXHNGNs_@@YGPAXPAK@Z
?_HIND__MIJTE_Y_zmh@@YGFPAGJ@Z
?_XZGRLHPDJDZ_NU@@YGPAIF@Z
?D__MeVL__@@YGPAIM@Z
?__fj_lk__um@@YGKEK@Z
?LM_MBdwn@@YGKM@Z
?__mvxpgiqIOU_K_UIKWqwt@@YGHJ@Z
?AP_TW_Dz_jgdyEMUNit_f_@@YGXPAF@Z
?_gc_I_JF@@YGPAMD@Z
?GCFE_DVxgdoiquf__n_@@YGJMPA_N@Z
?ZsrsgmnjLJE_JHXy__@@YGXPAE@Z
?bw_fowFZE_@@YGPAHPAH@Z
?EFMzkSX_Zf_i@@YGPAHPAE@Z
?uqHI_Czd@@YGGPAF@Z
?H_Y_TMCHK@@YGJPAF@Z
?v_ndxiti@@YGKG@Z
?H__PANSSR_@@YGPAFPAMPAE@Z
?mtomTGQMyMPGT@@YGF_NK@Z
?x___v_wrwISQZW_UYlz@@YGPAMM@Z
?_qNMuYBT__LQq___lj@@YGDPADH@Z
?l_zob_Fwfzso_me_vu@@YGPAXGPAD@Z
?_U_M_CT@@YGXGI@Z
?juaownjeEJ__@@YGPADPAEPAE@Z
?ZYSKRDWHRL__pyf@@YGEPAKH@Z
?_vm__uuWMRQZnasf_uWCQ@@YGPAXGM@Z
?_i__bd_cgckz_qutAFY@@YGXPAFH@Z
?MWWNXP_L__Tjh@@YGPAKE@Z
?BatjsgkUAbvstzkqV@@YGGFPAF@Z
?AGSsoobmnufmn_yn_hV@@YGGK@Z
?a__of_qtarDpnwg@@YGIKK@Z
?wez_jhPB_W_MBUU__@@YGPAGM_N@Z
?sgkcvLiey_rPUJVXXOX@@YGXPAH@Z
?YNRlIBNlqOc_zED@@YG_NPAKF@Z
?s__AUKDmxYEI_Y@@YGXD@Z
?LWSTBZF_H___ixmcvg_@@YGPAXPAH@Z
?pqqtwkSAZM@@YGPAI_NPAJ@Z
?a__gpdp_qWVY_@@YGPAI_NE@Z
?_WOFrsv_w_WWGZF@@YGPAJPANF@Z
?_aIJ__KYIOwm_g_@@YGPAKEPAH@Z
?OFY_BLq_bknnQF@@YGXHH@Z
?ZZ__QRgmz@@YGEH@Z
Sections
.text Size: 85KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.icode Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 34KB - Virtual size: 190KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ