Z:\Ventoy\Vlnk\vs\VentoyVlnk\Release\VentoyVlnk.pdb
Static task
static1
Behavioral task
behavioral1
Sample
5215fce21dcdd78e75641925110c16acfad3c6fcedeed71d72f94e50bc262fd4.exe
Resource
win7-20240221-en
General
-
Target
5215fce21dcdd78e75641925110c16acfad3c6fcedeed71d72f94e50bc262fd4
-
Size
1.4MB
-
MD5
642677edd55dc2b520d57aa713f4b5a5
-
SHA1
35ab4f94a189075acd2b6edab1067ccd8adb053f
-
SHA256
5215fce21dcdd78e75641925110c16acfad3c6fcedeed71d72f94e50bc262fd4
-
SHA512
0197f8ddf0feeb8423a2975c0d90bcba47e1a0a68b6c398e513f34f18916f2df29dfae4997ce01380ca8dc13d60d057aaa9c8d407902026c5c2c7e3e9a101e0d
-
SSDEEP
24576:C9UjXfYwJ+Cyu4qMSMteBB6VIySzowneRj:UqXAchyu4qMpNeQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5215fce21dcdd78e75641925110c16acfad3c6fcedeed71d72f94e50bc262fd4
Files
-
5215fce21dcdd78e75641925110c16acfad3c6fcedeed71d72f94e50bc262fd4.exe windows:6 windows x86 arch:x86
23b9079896617a8a01351c21a6caa337
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
ReadFile
GetLogicalDrives
GetFileSizeEx
GetCommandLineW
lstrlenW
WriteFile
DeviceIoControl
LoadLibraryExA
GetUserDefaultUILanguage
CreateMutexA
GetVolumeInformationA
CreateFileW
GetFileAttributesW
GetCurrentDirectoryA
MultiByteToWideChar
GetLastError
CreateFileA
SetDllDirectoryA
CloseHandle
LoadLibraryW
GetCurrentDirectoryW
GetProcAddress
WideCharToMultiByte
lstrcmpW
DecodePointer
SetEndOfFile
ReadConsoleW
HeapReAlloc
HeapSize
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
SetFilePointerEx
RaiseException
GetSystemInfo
VirtualProtect
VirtualQuery
FreeLibrary
GetModuleHandleW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwind
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetStdHandle
GetModuleFileNameW
ExitProcess
GetModuleHandleExW
HeapFree
HeapAlloc
GetFileType
GetTimeZoneInformation
CompareStringW
LCMapStringW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetStdHandle
GetStringTypeW
GetProcessHeap
WriteConsoleW
user32
EndDialog
SetWindowTextW
MessageBoxW
LoadIconW
GetDlgItem
EnableWindow
DialogBoxParamA
SendMessageW
Sections
.text Size: 94KB - Virtual size: 93KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE