mc.pdb
Static task
static1
Behavioral task
behavioral1
Sample
a123a987940d41d93f2e8bfa31af23d73a036eeab2eda77dfea2a164c56d59dd.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
a123a987940d41d93f2e8bfa31af23d73a036eeab2eda77dfea2a164c56d59dd.exe
Resource
win10v2004-20240426-en
General
-
Target
a123a987940d41d93f2e8bfa31af23d73a036eeab2eda77dfea2a164c56d59dd
-
Size
32KB
-
MD5
048aa3d0d139a93f35d8afeaec9d4273
-
SHA1
ab824fd16952d800cb025e30888609102d329642
-
SHA256
a123a987940d41d93f2e8bfa31af23d73a036eeab2eda77dfea2a164c56d59dd
-
SHA512
6c5c326d76475eb22fdc53df07bfb269b4d5deee8e55c00a5c0ef89009c90730e2ebc5c15eefd7c1a0f16350ee93efac1d7d8700daacc2ff33369171cc6dda11
-
SSDEEP
384:Ju/eczBU7Olw75mvmqt/SytJz8DzCkmXBCp0Zyz5BuBbYyv4slgFRmcKXp3HbqB:JuVe7zuZt/uzCkmRCuK5yRkcL374
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a123a987940d41d93f2e8bfa31af23d73a036eeab2eda77dfea2a164c56d59dd
Files
-
a123a987940d41d93f2e8bfa31af23d73a036eeab2eda77dfea2a164c56d59dd.exe windows:5 windows x64 arch:x64
b083eb2bbca949488e156db00596bb79
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
user32
CharNextA
CharPrevA
CharToOemA
msvcrt
_unlink
memset
fputws
wcslen
_get_osfhandle
wcscat
swprintf
wcscpy
fflush
free
iswctype
memcpy
_wcsnicmp
wcscmp
ftell
fclose
fwrite
_wcsicmp
fread
__C_specific_handler
_XcptFilter
_c_exit
_exit
_cexit
__initenv
__getmainargs
_initterm
__setusermatherr
_commode
_fmode
__set_app_type
malloc
fopen
setlocale
exit
strcpy
tolower
strlen
atoi
_splitpath
strcat
_iob
fprintf
fputs
realloc
kernel32
GetOEMCP
SetFileAttributesA
GetFileAttributesA
MultiByteToWideChar
IsDBCSLeadByte
LoadLibraryA
GetProcAddress
IsValidCodePage
GetCPInfo
GetConsoleMode
WriteConsoleW
WideCharToMultiByte
SetFileApisToOEM
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 372B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 952B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ