C:\Users\dell\Documents\Visual Studio 2012\NEHE--10\Debug\NEHE--10.pdb
Static task
static1
Behavioral task
behavioral1
Sample
1d761ce801a219ef756d2dcb2bb2bb3400db5121319866ee74fa00c7211826a1.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1d761ce801a219ef756d2dcb2bb2bb3400db5121319866ee74fa00c7211826a1.exe
Resource
win10v2004-20240419-en
General
-
Target
1d761ce801a219ef756d2dcb2bb2bb3400db5121319866ee74fa00c7211826a1
-
Size
42KB
-
MD5
1ff8b906a73acb72057bb3b0d59d3dba
-
SHA1
bd9fe9800da74a09d2c2d63a952a1d2cb93a836e
-
SHA256
1d761ce801a219ef756d2dcb2bb2bb3400db5121319866ee74fa00c7211826a1
-
SHA512
375a2f6aab66baa1118ffec2ff5f6f3d11f7165becb017f279c377ac7fabc3cb68284f1994a8705a2c6a05e53cd040fc1286528d38106a257e76af320e86fdab
-
SSDEEP
384:0g9AVy/fI3q7PjS0QC8qsrm4Dgu+D/Z4OdvtcisYpEqZF/FpyRkflo:0g9Pza0QeIPq/WaYYpBNDOIl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1d761ce801a219ef756d2dcb2bb2bb3400db5121319866ee74fa00c7211826a1
Files
-
1d761ce801a219ef756d2dcb2bb2bb3400db5121319866ee74fa00c7211826a1.exe windows:6 windows x86 arch:x86
40a2ed1a14bafc78829c6339d04cd1b7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetModuleHandleW
GetModuleFileNameW
FreeLibrary
VirtualQuery
GetProcessHeap
HeapFree
HeapAlloc
EncodePointer
WideCharToMultiByte
QueryPerformanceCounter
LoadLibraryW
lstrlenA
LoadLibraryExW
GetProcAddress
GetLastError
RaiseException
IsProcessorFeaturePresent
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
IsDebuggerPresent
DecodePointer
MultiByteToWideChar
GetModuleHandleA
user32
ChangeDisplaySettingsA
LoadIconA
LoadCursorA
ShowCursor
MessageBoxA
AdjustWindowRectEx
ReleaseDC
GetDC
SetForegroundWindow
SetFocus
ShowWindow
DestroyWindow
CreateWindowExA
UnregisterClassA
RegisterClassA
PostQuitMessage
DefWindowProcA
PeekMessageA
DispatchMessageA
TranslateMessage
gdi32
SwapBuffers
SetPixelFormat
ChoosePixelFormat
opengl32
wglDeleteContext
wglMakeCurrent
glBegin
glViewport
glVertex3f
glTranslatef
glTexCoord2f
glShadeModel
glRotatef
glNormal3f
glMatrixMode
glLoadIdentity
glHint
glEnd
glEnable
glDepthFunc
glClearDepth
glClearColor
glClear
wglCreateContext
glBindTexture
glu32
gluPerspective
msvcr110d
_configthreadlocale
_controlfp_s
_invoke_watson
_onexit
__dllonexit
_calloc_dbg
_unlock
_lock
__crtSetUnhandledExceptionFilter
?terminate@@YAXXZ
_except_handler4_common
_wsplitpath_s
_wmakepath_s
wcscpy_s
_commode
_fmode
_acmdln
_initterm
_initterm_e
??2@YAPAXI@Z
memset
fclose
fgets
fopen
sscanf
cos
sin
__setusermatherr
__crtUnhandledException
__crtTerminateProcess
_CRT_RTC_INITW
_XcptFilter
__crtGetShowWindowMode
_amsg_exit
__getmainargs
__set_app_type
_CrtDbgReportW
_CrtSetCheckCount
exit
_exit
_cexit
_ismbblead
_crt_debugger_hook
Sections
.textbss Size: - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ