D:\APPMWinBio_V3.8\EN\FingerPrint\FingerPrint_Enroll\Release\FingerPrint_Enroll.pdb
Static task
static1
Behavioral task
behavioral1
Sample
6611851d0f117e73ec019e78c994da79b509df4a012ac3c906d0319179632250.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
6611851d0f117e73ec019e78c994da79b509df4a012ac3c906d0319179632250.exe
Resource
win10v2004-20240508-en
General
-
Target
6611851d0f117e73ec019e78c994da79b509df4a012ac3c906d0319179632250
-
Size
142KB
-
MD5
ecb442dc2f164e35842473c3bfa24c01
-
SHA1
724d446ab6b612b1194506be7ecd92d1305d218e
-
SHA256
6611851d0f117e73ec019e78c994da79b509df4a012ac3c906d0319179632250
-
SHA512
d424f9f249a96e9050bcd66bb5957a09d8648f85d9f398f289b37ddbb0a9aeb30462b03b6c6bb4b94b5bdc0fac4498b5289734ee921a5c2fccdb7c2073bde9f7
-
SSDEEP
3072:6W8BNl4aFIb+k8NrVsclGv+iCiUwSd41d4Ryuao7FDmlLkLl:6W4Nln1ktcNiCSi37FDmFkL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6611851d0f117e73ec019e78c994da79b509df4a012ac3c906d0319179632250
Files
-
6611851d0f117e73ec019e78c994da79b509df4a012ac3c906d0319179632250.exe windows:6 windows x86 arch:x86
05f759f5c5e43a35ff0604527e37e7a0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
fpengine
SetDispOption
GenFpChar
ord22
GetFpCharByGen
GetFpCharByEnl
ord9
GetRetMsg
GetWorkMsg
EnrolFpChar
ord5
ord4
ord6
ord21
kernel32
LeaveCriticalSection
DecodePointer
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
HeapReAlloc
HeapSize
SetFilePointerEx
GetProcessHeap
LCMapStringW
CloseHandle
CreateFileW
WriteFile
GetModuleFileNameW
GetStringTypeW
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
WriteConsoleW
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
RaiseException
ExitProcess
GetModuleHandleExW
GetStdHandle
HeapFree
HeapAlloc
GetFileType
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
user32
IsDlgButtonChecked
GetDlgItemInt
EndDialog
KillTimer
GetDC
SetDlgItemTextW
SetTimer
MessageBoxW
CheckRadioButton
SetDlgItemInt
DialogBoxParamW
Sections
.text Size: 62KB - Virtual size: 62KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ