C:\Users\Test\documents\visual studio 2010\Projects\win32\x64\Debug\win32.pdb
Static task
static1
Behavioral task
behavioral1
Sample
win32.exe
Resource
win10v2004-20240419-en
General
-
Target
win32.exe
-
Size
94KB
-
MD5
ff44b2cff44088f98498f9b6ba4f5d51
-
SHA1
da6d67c86da817440570bcca8c526667e921f87d
-
SHA256
bc42abf3e3d7487d7c1f19aa1c1b3131ad0c6ce50fc0d32b91fcc95fdb4a9ea5
-
SHA512
c54bbe38016206f26e1bca90837dd1957461ca985059ae5e49662ac647b1db534b8db5953fc480ffd26ba5f9c4fa8e360dd31ec93f1e60c376e8e01dccf24b6a
-
SSDEEP
768:/dANSNz2X8ollxhNTZ9SFQj6t5JhpeP67MGGLaRA07q/U1kDMXOzUB53:i4Zc5bTOpb+nQA07q/U/93
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource win32.exe
Files
-
win32.exe.exe windows:5 windows x64 arch:x64
576af7978354f644b040054ae228dfc9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
kernel32
GetProcAddress
FindClose
FindNextFileW
FindFirstFileW
GetTempPathW
HeapAlloc
HeapCreate
LoadLibraryW
LCMapStringW
HeapReAlloc
HeapSize
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
Sleep
VirtualQuery
GetProcessHeap
HeapFree
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
HeapDestroy
GetVersion
HeapSetInformation
GetFileType
SetHandleCount
GetModuleHandleW
ExitProcess
DecodePointer
GetCommandLineW
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
RaiseException
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
EncodePointer
GetLastError
SetConsoleCtrlHandler
FreeLibrary
GetLocaleInfoW
FlsGetValue
FlsSetValue
FlsFree
SetLastError
GetCurrentThreadId
GetCurrentThread
FlsAlloc
RtlUnwindEx
WriteFile
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetStringTypeW
user32
EndDialog
DialogBoxParamW
DestroyWindow
DefWindowProcW
BeginPaint
EndPaint
PostQuitMessage
CreateWindowExW
ShowWindow
UpdateWindow
LoadIconW
LoadCursorW
RegisterClassExW
LoadStringW
LoadAcceleratorsW
GetMessageW
TranslateAcceleratorW
TranslateMessage
DispatchMessageW
Sections
.text Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 856B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ