g:\projects\funny\publish\MultiLoginWindow.pdb
Static task
static1
Behavioral task
behavioral1
Sample
8b92c6efba87e17e7bb70a9e65d53d964fd50e8700745b79c4beaed4e3f77a39.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
8b92c6efba87e17e7bb70a9e65d53d964fd50e8700745b79c4beaed4e3f77a39.exe
Resource
win10v2004-20240426-en
General
-
Target
8b92c6efba87e17e7bb70a9e65d53d964fd50e8700745b79c4beaed4e3f77a39
-
Size
11.4MB
-
MD5
228c7270c58a129b2af19d8dbade7ad1
-
SHA1
25c491476d2546ac8f87a8edf4b1746426630874
-
SHA256
8b92c6efba87e17e7bb70a9e65d53d964fd50e8700745b79c4beaed4e3f77a39
-
SHA512
f8ef3f4ef696f8651d90471f40c5f1d5350c804c32010290a61f45d27ac6dccfc586bf082041cada1c5b0ce50c6cf8c994d2181b12c2d2e611d40da201882254
-
SSDEEP
196608:/m8ATO+ErNNNP1ZJnCoKE59CAxdelug7rhLDhHJypx9Yxwl2CKCu9hep:JATOtTjCbag7rhLlHJK9QArRu9he
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8b92c6efba87e17e7bb70a9e65d53d964fd50e8700745b79c4beaed4e3f77a39
Files
-
8b92c6efba87e17e7bb70a9e65d53d964fd50e8700745b79c4beaed4e3f77a39.exe windows:5 windows x86 arch:x86
200ec3bb9a827052992d7fcc8112014e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetVersionExA
GetEnvironmentStringsW
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
InvalidateRect
gdi32
SaveDC
comdlg32
GetFileTitleA
winspool.drv
DocumentPropertiesA
advapi32
RegDeleteValueA
shell32
Shell_NotifyIconA
comctl32
InitCommonControlsEx
shlwapi
PathStripToRootA
oledlg
ord8
ole32
CoRegisterMessageFilter
oleaut32
SafeArrayDestroy
ntdll
_ultoa
ws2_32
htonl
winhttp
WinHttpCrackUrl
wininet
InternetCloseHandle
winmm
mciSendStringA
Sections
.text Size: - Virtual size: 726KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 133KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 223KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data30 Size: - Virtual size: 10.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data31 Size: 11.2MB - Virtual size: 11.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 252B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 263KB - Virtual size: 262KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ