C:\Users\user\source\repos\Malware\x64\Release\Malware.pdb
Static task
static1
Behavioral task
behavioral1
Sample
282c1ebb16ad0edc41389d1e73a74607.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
282c1ebb16ad0edc41389d1e73a74607.exe
Resource
win10v2004-20240226-en
General
-
Target
282c1ebb16ad0edc41389d1e73a74607.exe
-
Size
12KB
-
MD5
282c1ebb16ad0edc41389d1e73a74607
-
SHA1
fbcdda121484ea6125827ed4e7b1b00f6a88835d
-
SHA256
7712424f2dec2d08630237c737e5f81789d2e92edc31111c72eaa0388b6df1dc
-
SHA512
94be4f173c5c63947a6e7902a86c8851ee84a06d1ddec104af91592178adafc3180f652791badc3e0c1139bbc7c9f64b9e47ccd0adadd16159a40ab6c188b292
-
SSDEEP
192:mdPs89eq20SlgHpmeWcL2ShJwHMUNmSTGCu3Q5tfBcyu8:mO89eq2umtE2SH2oSiCu3cz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 282c1ebb16ad0edc41389d1e73a74607.exe
Files
-
282c1ebb16ad0edc41389d1e73a74607.exe.exe windows:6 windows x64 arch:x64
32f9a22be4131aca65aa9d384c68e929
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
kernel32
FreeConsole
RtlLookupFunctionEntry
CloseHandle
DeleteFileW
Sleep
GetCurrentProcess
RtlVirtualUnwind
UnhandledExceptionFilter
GetModuleHandleW
SetUnhandledExceptionFilter
TerminateProcess
RtlCaptureContext
IsProcessorFeaturePresent
QueryPerformanceCounter
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
advapi32
OpenProcessToken
GetTokenInformation
shell32
ShellExecuteA
urlmon
URLDownloadToFileA
vcruntime140
__C_specific_handler
__current_exception_context
__current_exception
memset
memcpy
api-ms-win-crt-runtime-l1-1-0
_initialize_onexit_table
system
_crt_atexit
terminate
_register_thread_local_exe_atexit_callback
_c_exit
_cexit
__p___argv
_register_onexit_function
_exit
exit
_initterm_e
_initterm
_get_initial_narrow_environment
_initialize_narrow_environment
_configure_narrow_argv
__p___argc
_set_app_type
_seh_filter_exe
api-ms-win-crt-filesystem-l1-1-0
_stat64i32
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-stdio-l1-1-0
_set_fmode
__p__commode
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
api-ms-win-crt-heap-l1-1-0
_set_new_mode
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 384B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 48B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ