C:\Users\user\source\repos\FREEBUCKDISCORDINTEGRATE\Release\freebucks.pdb
Static task
static1
Behavioral task
behavioral1
Sample
a7fd933e0c5551defd04fc9eb7e329506187803cf0857e2d26c7f7979e11a5de.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
a7fd933e0c5551defd04fc9eb7e329506187803cf0857e2d26c7f7979e11a5de.exe
Resource
win10v2004-20240508-en
General
-
Target
a7fd933e0c5551defd04fc9eb7e329506187803cf0857e2d26c7f7979e11a5de
-
Size
468KB
-
MD5
174e1b6d2bb7b06ca56a56676d5ef595
-
SHA1
7219589ac9967fdedabc92d6fcf09124c0d352dd
-
SHA256
a7fd933e0c5551defd04fc9eb7e329506187803cf0857e2d26c7f7979e11a5de
-
SHA512
94b91df0f7a97fa30b6b3448294bb9a0b87b6aa31c3132d3d05ab2be69e750b01bfd65eb6740501d02f351aa6427eae3d3036f21e81946d25af5398e7aa08e36
-
SSDEEP
12288:52+N92IYY+iC5hMbKHG+G9FQWmNrNB0N4quKIOY3/vymzPut3k0AMBRb6c0CezKV:zXrrC/MbKWOWmfB0IKIOY3/vymzPut3b
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a7fd933e0c5551defd04fc9eb7e329506187803cf0857e2d26c7f7979e11a5de
Files
-
a7fd933e0c5551defd04fc9eb7e329506187803cf0857e2d26c7f7979e11a5de.exe windows:6 windows x86 arch:x86
2c7d43bd284220c85dd56c5fec1f8955
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
api-ms-win-crt-heap-l1-1-0
malloc
_callnewh
free
kernel32
QueryPerformanceCounter
GetCurrentThreadId
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GetModuleHandleW
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
Sleep
GetCurrentProcessId
api-ms-win-crt-runtime-l1-1-0
terminate
_cexit
_crt_at_quick_exit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_seh_filter_dll
abort
_initialize_narrow_environment
_configure_narrow_argv
_invalid_parameter_noinfo_noreturn
vcruntime140
__current_exception_context
__FrameUnwindFilter
memmove
_except_handler4_common
__std_exception_copy
__std_exception_destroy
_CxxThrowException
__current_exception
memset
msvcp140
?_Xlength_error@std@@YAXPBD@Z
?__ExceptionPtrCopy@@YAXPAXPBX@Z
?__ExceptionPtrDestroy@@YAXPAX@Z
winhttp
WinHttpReceiveResponse
WinHttpOpenRequest
WinHttpCloseHandle
WinHttpSendRequest
WinHttpConnect
WinHttpOpen
mscoree
_CorExeMain
Sections
.text Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 440KB - Virtual size: 440KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ