accwiz.pdb
Static task
static1
Behavioral task
behavioral1
Sample
c6e91a08d84b2229a707ca04949b5bb4c8625afe8db38e7e2f1361150cde70ff.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c6e91a08d84b2229a707ca04949b5bb4c8625afe8db38e7e2f1361150cde70ff.exe
Resource
win10v2004-20240508-en
General
-
Target
c6e91a08d84b2229a707ca04949b5bb4c8625afe8db38e7e2f1361150cde70ff
-
Size
192KB
-
MD5
0368306d6b7ca6f8cd64918f8133523b
-
SHA1
ad32ba3db92c2670f466e718f35d7f6dbe0532e8
-
SHA256
c6e91a08d84b2229a707ca04949b5bb4c8625afe8db38e7e2f1361150cde70ff
-
SHA512
95e8fc25e5e4afe8eee972cb4418b6fd990e6f2f27d53d1b0a719a5ad1e3333b8a8b745b8be4469daf3f8b8d112ef75238a596f5d896bbe7377469117d0b3a31
-
SSDEEP
3072:E+8rpm1NGmuJB/VguosCXSgzo2SUkqaI:ERmXGmQ9klXSgzoPqa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c6e91a08d84b2229a707ca04949b5bb4c8625afe8db38e7e2f1361150cde70ff
Files
-
c6e91a08d84b2229a707ca04949b5bb4c8625afe8db38e7e2f1361150cde70ff.exe windows:5 windows x86 arch:x86
1fe1cde63865e358713fe4ffdcf616b6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
msvcrt
_onexit
__dllonexit
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
_controlfp
_initterm
__getmainargs
_acmdln
exit
_cexit
_XcptFilter
_exit
_c_exit
__setusermatherr
_wtoi
_wtol
__CxxFrameHandler
??2@YAPAXI@Z
??3@YAXPAX@Z
wcschr
swscanf
wcstoul
_ftol
_purecall
advapi32
RegOpenKeyExW
RegOpenKeyExA
RegOpenKeyA
RegCreateKeyA
RegEnumValueA
RegSetValueExA
RegEnumKeyA
RegCreateKeyExW
RegSetValueExW
RegOpenKeyW
RegQueryValueExW
RegCloseKey
RegCreateKeyW
kernel32
CreateMutexW
SetLastError
GetProcAddress
GetModuleHandleW
lstrcpyW
lstrcmpW
lstrcatW
CloseHandle
WriteFile
MulDiv
Sleep
lstrcmpiW
WriteProfileStringW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetModuleHandleA
GetStartupInfoA
GetLastError
GetCommandLineW
lstrlenW
CreateFileW
GetFileSize
ReadFile
GetVersionExW
GetNumberFormatW
gdi32
TextOutW
RestoreDC
PatBlt
GetTextColor
RealizePalette
ExtTextOutW
BitBlt
CreateCompatibleBitmap
SetLayout
SelectObject
DeleteObject
SetBkColor
SelectPalette
SetTextColor
SetBkMode
CreatePalette
CreateBitmap
CreateCompatibleDC
GetTextMetricsW
DeleteDC
SetTextAlign
Rectangle
GetTextExtentPoint32W
SaveDC
CreateSolidBrush
SetPaletteEntries
GetStockObject
GetNearestColor
GetNearestPaletteIndex
GetPaletteEntries
GetDeviceCaps
CreateFontIndirectW
user32
SetTimer
KillTimer
SetCaretBlinkTime
SwapMouseButton
SetSysColors
SetFocus
GetFocus
GetForegroundWindow
DrawCaptionTempW
SetSysColorsTemp
LoadIconW
EnumDisplaySettingsW
ChangeDisplaySettingsW
SendMessageTimeoutW
FindWindowW
GetWindowRect
MapWindowPoints
SetWindowPos
ShowWindow
SetWindowLongW
LoadStringW
SendMessageW
GetDlgItem
SendDlgItemMessageW
SetDlgItemTextW
wsprintfW
GetWindowLongW
MessageBoxW
ReleaseDC
GetDC
GetDesktopWindow
SystemParametersInfoW
GetWindow
GetDlgCtrlID
GetTopWindow
GetClientRect
HiliteMenuItem
EnableMenuItem
LoadMenuW
OffsetRect
InflateRect
GetSystemMetrics
FillRect
DrawFrameControl
DestroyIcon
DrawTextW
DrawEdge
LoadImageW
InvalidateRect
DefWindowProcW
EndPaint
BeginPaint
GetSysColor
RegisterClassW
LoadCursorW
PostMessageW
GetParent
SetWindowTextW
EnableWindow
comctl32
PropertySheetW
ord17
comdlg32
GetSaveFileNameW
shlwapi
StrTrimW
shell32
ShellExecuteW
ord258
ole32
CoInitialize
CoCreateInstance
uxtheme
IsThemeActive
GetCurrentThemeName
ord4
ord65
Sections
.text Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 139KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE