fontdrvhost.pdb
Static task
static1
Behavioral task
behavioral1
Sample
a60b8c4a057c8eb4cf258ff9ca689b8ca73cc16be1519df05e92f2d5d988afb0.exe
Resource
win10v2004-20240419-en
General
-
Target
a60b8c4a057c8eb4cf258ff9ca689b8ca73cc16be1519df05e92f2d5d988afb0
-
Size
836KB
-
MD5
931c7b57c071985f39c84bca695a178b
-
SHA1
8b74daad9e913c6cb3db7269e0d1c373cc530433
-
SHA256
a60b8c4a057c8eb4cf258ff9ca689b8ca73cc16be1519df05e92f2d5d988afb0
-
SHA512
36890e4fd1484bcfc9be908dd7e774a214e3544df78dbfce3ddc9abe9954ae3be82d4b9550e69d643d6fe286603402f3e2c02975ca336485df3964c31fdad922
-
SSDEEP
12288:DIVB8NrdGJRcvp0/OuFyQ9PCbkYmZZTYLsD7gOCe5NUJA0dhlv:kdJRciWuYcabPmbXnNWAmv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a60b8c4a057c8eb4cf258ff9ca689b8ca73cc16be1519df05e92f2d5d988afb0
Files
-
a60b8c4a057c8eb4cf258ff9ca689b8ca73cc16be1519df05e92f2d5d988afb0.exe windows:10 windows x64 arch:x64
b8cc1baf5b6755c224da8d3093d536ba
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
msvcp_win
?_Xlength_error@std@@YAXPEBD@Z
api-ms-win-crt-runtime-l1-1-0
_initterm_e
_initterm
_register_thread_local_exe_atexit_callback
_c_exit
api-ms-win-crt-private-l1-1-0
_o__callnewh
_o__cexit
_o__configthreadlocale
_o__configure_narrow_argv
_o__crt_atexit
_o__errno
_o__exit
_o__get_initial_narrow_environment
_o__initialize_narrow_environment
_o__initialize_onexit_table
_o__invalid_parameter_noinfo
_o__invalid_parameter_noinfo_noreturn
_o__itow
_o__lfind
_o__purecall
_o__register_onexit_function
_o__seh_filter_exe
_o__set_app_type
_o__set_fmode
_o__set_new_mode
_o__stricmp
memmove
_o__strlwr
_o__wcsicmp
_o__wcsnicmp
_o_atoi
_o_atol
_o_bsearch
_o_exit
_o_free
_o_isdigit
_o_islower
_o_iswdigit
_o_isxdigit
_o_malloc
_o_qsort
_o_rand
_o_rand_s
_o_realloc
_o_sqrt
_o_strtol
_o_terminate
__current_exception
__current_exception_context
_o___stdio_common_vswprintf
_o___stdio_common_vsprintf
_o___stdio_common_vsnprintf_s
_o___stdio_common_vfprintf
_o___std_exception_destroy
_o___std_exception_copy
_o___p__commode
_o___p___argv
_o___p___argc
_o___acrt_iob_func
__std_terminate
__C_specific_handler
__CxxFrameHandler4
strchr
wcschr
wcsrchr
strstr
__CxxFrameHandler3
_CxxThrowException
memcmp
memcpy
api-ms-win-crt-string-l1-1-0
strnlen
strncmp
strcmp
memset
wcsncmp
kernel32
RaiseException
GetACP
GetOEMCP
MapViewOfFile
CreateFileMappingW
TlsGetValue
SetFileInformationByHandle
GetFileInformationByHandle
MultiByteToWideChar
UnmapViewOfFile
RtlRaiseException
MulDiv
GlobalFree
GlobalAlloc
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
IsDebuggerPresent
DebugBreak
GetModuleHandleW
GetProcessHeap
GetCurrentProcessId
ExitProcess
DeleteCriticalSection
CreateMutexExW
GetProcAddress
HeapAlloc
CreateThread
CreateThreadpoolTimer
ReleaseSRWLockShared
SetThreadpoolTimer
CloseHandle
OpenSemaphoreW
TlsAlloc
WaitForSingleObjectEx
AcquireSRWLockExclusive
CloseThreadpoolTimer
RaiseFailFastException
OutputDebugStringW
ReleaseSRWLockExclusive
GetLastError
FormatMessageW
SetProcessMitigationPolicy
ReleaseMutex
GetCurrentThreadId
WaitForSingleObject
WaitForThreadpoolTimerCallbacks
InitializeCriticalSectionEx
GetEnvironmentVariableW
InitializeCriticalSection
LeaveCriticalSection
SetProcessShutdownParameters
WaitForMultipleObjects
GetModuleHandleExW
ReleaseSemaphore
EnterCriticalSection
SetLastError
HeapFree
CreateSemaphoreExW
TlsSetValue
GetModuleFileNameA
AcquireSRWLockShared
WideCharToMultiByte
ntdll
RtlMultiByteToUnicodeN
RtlUnicodeToMultiByteN
RtlAllocateHeap
win32u
NtGdiExtEscape
Sections
.text Size: 648KB - Virtual size: 645KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 104KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ