G:\Projects\uninstall-tool\Ready\geek.pdb
Static task
static1
Behavioral task
behavioral1
Sample
423076bd0d0321fe7d985912c83ba06bfa5e12fe73b66c4a3f0bf3131dca73b6.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
423076bd0d0321fe7d985912c83ba06bfa5e12fe73b66c4a3f0bf3131dca73b6.exe
Resource
win10v2004-20240419-en
General
-
Target
423076bd0d0321fe7d985912c83ba06bfa5e12fe73b66c4a3f0bf3131dca73b6
-
Size
4.4MB
-
MD5
53fff451f6112f778e67ad2574ce2900
-
SHA1
20eb40295f3f84145114e5f2989416f4c1bc35d4
-
SHA256
423076bd0d0321fe7d985912c83ba06bfa5e12fe73b66c4a3f0bf3131dca73b6
-
SHA512
95544ce424e6e58502aa450a3bcccd8589b115ee734d8601eed888a16166c5a984b07d89a3605d68ffeb91537a24f6979827968f040ef7f60bad2bd1ca441ffd
-
SSDEEP
98304:dOWZSdfaLVNZkzOj6k6tagnRyiKi0ctB5YY5Sqlfbu1T:dvLVAK1Pi0A54qlfS1T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 423076bd0d0321fe7d985912c83ba06bfa5e12fe73b66c4a3f0bf3131dca73b6
Files
-
423076bd0d0321fe7d985912c83ba06bfa5e12fe73b66c4a3f0bf3131dca73b6.exe windows:6 windows x86 arch:x86
8995f65c58064605deae91ffff63864a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
FlushFileBuffers
user32
CopyAcceleratorTableW
gdi32
GetCharWidthW
msimg32
GradientFill
winspool.drv
OpenPrinterW
advapi32
RegEnumValueW
shell32
DragFinish
comctl32
ImageList_Draw
shlwapi
PathStripToRootW
uxtheme
GetThemeColor
ole32
CoFreeUnusedLibraries
oleaut32
VariantInit
oledlg
OleUIBusyW
version
VerQueryValueW
gdiplus
GdiplusShutdown
winmm
PlaySoundW
oleacc
LresultFromObject
wininet
InternetSetStatusCallbackW
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 3.0MB - Virtual size: 6.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 286KB - Virtual size: 288KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ