D:\PMS\pms4\Project(20131004)\GolfProject\bin\GolfProject.pdb
Static task
static1
Behavioral task
behavioral1
Sample
1879a3516b135cddae7ccd6d91fb237cb7e1dc6acb24f5f78240bbf4880912ea.exe
Resource
win7-20240319-en
General
-
Target
1879a3516b135cddae7ccd6d91fb237cb7e1dc6acb24f5f78240bbf4880912ea
-
Size
469KB
-
MD5
d5619a203e347653b6f114e8301c2182
-
SHA1
f3204d89f135cd0730520ee79908f264a1391f9a
-
SHA256
1879a3516b135cddae7ccd6d91fb237cb7e1dc6acb24f5f78240bbf4880912ea
-
SHA512
1a22e863780e4bdb79525d49b63a73abc1c10f1664624a017669f3c7faf22b6b58a5fb97f8894625edd2927b848f436823ac8f688e0f75058c4b67d59b6fc5c2
-
SSDEEP
12288:olJ+TFukCI+P9CcrmwEuBwUqA5qFbAGTALHasp6:00U9CcrmwEPA5qFxT7C6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1879a3516b135cddae7ccd6d91fb237cb7e1dc6acb24f5f78240bbf4880912ea
Files
-
1879a3516b135cddae7ccd6d91fb237cb7e1dc6acb24f5f78240bbf4880912ea.exe windows:5 windows x86 arch:x86
46b9336adb2f672dcc7203d78b439246
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
DestroyMenu
advapi32
RegQueryValueExW
shell32
ShellExecuteW
ws2_32
recv
iphlpapi
GetAdaptersInfo
oleacc
LresultFromObject
gdi32
DeleteDC
winspool.drv
DocumentPropertiesW
oleaut32
VariantClear
Sections
.text Size: 456KB - Virtual size: 504KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE