C:\Projects\loggersuite\processors\sna1000sproc\Release\sna1000sproc.pdb
Static task
static1
Behavioral task
behavioral1
Sample
80701fccb90e3f8a7b26248c096444b35524d6f5ab97eeaf30a3d893a880e653.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
80701fccb90e3f8a7b26248c096444b35524d6f5ab97eeaf30a3d893a880e653.exe
Resource
win10v2004-20240508-en
General
-
Target
80701fccb90e3f8a7b26248c096444b35524d6f5ab97eeaf30a3d893a880e653
-
Size
3.3MB
-
MD5
00554462fa18dc8d50d0d811255ed206
-
SHA1
9099baa725aa6d508a62d077c20d760dab3610a3
-
SHA256
80701fccb90e3f8a7b26248c096444b35524d6f5ab97eeaf30a3d893a880e653
-
SHA512
c3f1a2955643cbe75f279a99a7a310e0276fbf8605896afcb323f32e690d635cbbcf39e662f88d830fb695723066ed1b6b9544abf4cf847b3f2191e10d2dd732
-
SSDEEP
98304:UjzasIR2f97aIv1kD3m9zEiDEJy54/qtqzUpURHxg:UjzasRf9hVfDsUGRHxg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 80701fccb90e3f8a7b26248c096444b35524d6f5ab97eeaf30a3d893a880e653
Files
-
80701fccb90e3f8a7b26248c096444b35524d6f5ab97eeaf30a3d893a880e653.exe windows:6 windows x86 arch:x86
5885fa30f20504dace699af1de83e05e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
ws2_32
WSACleanup
gethostbyname
ntohl
inet_ntoa
WSAStartup
gethostname
inet_addr
WSAWaitForMultipleEvents
WSASocketA
WSASendDisconnect
WSASend
WSARecv
WSAGetOverlappedResult
WSAEventSelect
WSAEnumNetworkEvents
WSACreateEvent
WSAConnect
WSACloseEvent
WSAAccept
htonl
mpr
WNetEnumResourceA
WNetCloseEnum
WNetOpenEnumA
kernel32
FindFirstFileExW
SetFilePointerEx
ReadConsoleW
GetConsoleMode
GetConsoleOutputCP
EnumSystemLocalesW
IsValidLocale
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetTimeZoneInformation
GetStringTypeW
GetStdHandle
ExitProcess
IsValidCodePage
QueryPerformanceCounter
QueryPerformanceFrequency
HeapQueryInformation
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
VirtualQuery
VirtualAlloc
GetSystemInfo
GetCommandLineW
GetCommandLineA
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwind
OutputDebugStringW
FindNextFileW
GetEnvironmentStringsW
InitializeSListHead
GetFileType
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CreateEventW
WaitForSingleObjectEx
LocalUnlock
LocalLock
GetUserDefaultLCID
ReplaceFileA
GetTempFileNameA
GetDiskFreeSpaceA
Sleep
SearchPathA
GetProfileIntA
GetSystemTimeAsFileTime
GetTickCount
GetTempPathA
VerifyVersionInfoA
VerSetConditionMask
GetWindowsDirectoryA
SetErrorMode
SystemTimeToTzSpecificLocalTime
SetFileTime
SetFileAttributesA
LocalFileTimeToFileTime
GetFileTime
GetFileSizeEx
GetFileAttributesExA
GetFileAttributesA
FileTimeToLocalFileTime
GetCurrentDirectoryA
FindResourceExW
GetACP
GetCPInfo
GetOEMCP
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
GetAtomNameA
GlobalFlags
LocalReAlloc
LocalAlloc
GlobalHandle
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
SystemTimeToFileTime
FileTimeToSystemTime
GetStringTypeExA
GetThreadLocale
MoveFileA
lstrcmpiA
GetShortPathNameA
LoadLibraryExA
GetVolumeInformationA
WriteFile
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetFullPathNameA
FlushFileBuffers
FindFirstFileA
FindClose
DeleteFileA
CreateFileA
GetCurrentProcessId
GetPrivateProfileIntA
lstrcmpA
GetModuleFileNameA
GetCurrentThread
SuspendThread
SetThreadPriority
VirtualProtect
CompareStringA
GlobalGetAtomNameA
GlobalFindAtomA
GlobalAddAtomA
FindResourceA
lstrcmpW
GlobalDeleteAtom
LoadLibraryW
LoadLibraryA
LoadLibraryExW
GetModuleHandleW
GetModuleFileNameW
FreeLibrary
GetSystemDirectoryW
GetCurrentThreadId
EncodePointer
OutputDebugStringA
MultiByteToWideChar
CopyFileA
FormatMessageA
LocalFree
SetLastError
MulDiv
GetFileSize
GetTimeFormatA
GetDateFormatA
GetComputerNameA
GetLocalTime
GlobalFree
GlobalLock
GlobalUnlock
GlobalSize
GlobalReAlloc
GlobalAlloc
LeaveCriticalSection
EnterCriticalSection
WritePrivateProfileStringA
GetPrivateProfileStringA
lstrcpyA
InitializeCriticalSectionEx
WaitForMultipleObjects
CreateEventA
ResetEvent
SetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
GetLastError
RaiseException
DecodePointer
GetStartupInfoA
GetProcAddress
GetModuleHandleA
CreateMutexA
ReleaseMutex
GetVersionExA
ResumeThread
TerminateThread
GetCurrentProcess
WaitForSingleObject
DuplicateHandle
CloseHandle
WideCharToMultiByte
FindResourceW
SizeofResource
LockResource
SetFileAttributesW
LoadResource
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetConsoleCtrlHandler
CreateFileW
WriteConsoleW
SetCurrentDirectoryA
CreateDirectoryA
FindNextFileA
GetFileInformationByHandle
RemoveDirectoryA
lstrlenA
GetFileAttributesExW
SetStdHandle
user32
DeleteMenu
LoadImageW
DestroyIcon
TrackMouseEvent
GetDialogBaseUnits
CopyImage
RealChildWindowFromPoint
LoadCursorA
GetSysColorBrush
GetTabbedTextExtentW
GetMenuItemInfoA
DestroyMenu
CharUpperA
MapVirtualKeyA
GetKeyNameTextA
LoadBitmapA
GetWindowDC
TabbedTextOutA
GrayStringA
DrawTextExA
DrawTextA
ReleaseDC
GetDC
IsZoomed
SetRect
WindowFromPoint
ClientToScreen
KillTimer
GetWindowThreadProcessId
SetCursor
ShowOwnedPopups
PostQuitMessage
GetCursorPos
TranslateMessage
GetMessageA
MapDialogRect
GetAsyncKeyState
GetDesktopWindow
GetActiveWindow
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamA
IsDialogMessageA
SetWindowTextA
ScrollWindowEx
IsWindowEnabled
SendDlgItemMessageA
IsDlgButtonChecked
CheckRadioButton
CheckDlgButton
GetDlgItemTextA
SetDlgItemTextA
GetDlgItemInt
SetDlgItemInt
MoveWindow
ShowWindow
GetMonitorInfoA
MonitorFromWindow
WinHelpA
GetScrollInfo
SetScrollInfo
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
GetLastActivePopup
GetTopWindow
BringWindowToTop
GetClassLongA
SetWindowLongA
EqualRect
MapWindowPoints
ScreenToClient
MessageBoxA
AdjustWindowRectEx
GetWindowTextLengthA
RemovePropA
GetPropA
SetPropA
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetLayeredWindowAttributes
ScrollWindow
RedrawWindow
ValidateRect
EndPaint
BeginPaint
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
UpdateWindow
TrackPopupMenuEx
TrackPopupMenu
SetMenu
GetMenu
GetCapture
SetFocus
GetDlgCtrlID
GetDlgItem
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
SetWindowPos
DestroyWindow
IsChild
IsMenu
CreateWindowExA
GetClassInfoExA
GetClassInfoA
EnumDisplayMonitors
OpenClipboard
CloseClipboard
ReleaseCapture
LoadAcceleratorsA
SetClipboardData
EmptyClipboard
DrawStateA
RegisterClassA
CallWindowProcA
DefWindowProcA
GetMessageTime
GetMessagePos
PeekMessageA
DispatchMessageA
RegisterWindowMessageA
SetMenuItemInfoA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
CheckMenuItem
GetFocus
GetWindowTextA
RemoveMenu
InsertMenuA
GetMenuItemCount
TranslateAcceleratorA
LoadMenuA
CreatePopupMenu
InsertMenuItemA
LoadImageA
GetMenuBarInfo
UnpackDDElParam
ReuseDDElParam
SetParent
WaitMessage
SetCapture
LoadCursorW
GetMenuDefaultItem
GetNextDlgGroupItem
DrawFocusRect
DrawIconEx
GetIconInfo
MessageBeep
EnableScrollBar
HideCaret
InvertRect
GetClassNameA
SetClassLongA
SetWindowRgn
DrawEdge
DrawFrameControl
LoadMenuW
SetCursorPos
GetTabbedTextExtentA
DestroyCursor
GetWindowRgn
WindowFromDC
CreateMenu
InSendMessage
MonitorFromRect
SendNotifyMessageA
EnableWindow
SendMessageA
PostMessageA
IsWindowVisible
GetParent
IsWindow
GetKeyState
GetClientRect
InvalidateRect
CopyRect
LoadBitmapW
PtInRect
GetWindowLongA
LoadIconA
GetWindowRect
GetSystemMetrics
GetWindowPlacement
IsIconic
SetTimer
GetSystemMenu
EnableMenuItem
AppendMenuA
DrawIcon
IntersectRect
OffsetRect
GetWindow
LoadIconW
SystemParametersInfoA
UnregisterClassA
FillRect
IsRectEmpty
InflateRect
GetSysColor
SetRectEmpty
GetMenuStringA
GetMenuState
GetSubMenu
GetMenuItemID
SubtractRect
TranslateMDISysAccel
DefMDIChildProcA
DefFrameProcA
NotifyWinEvent
DrawMenuBar
EnumChildWindows
GetUpdateRect
IsClipboardFormatAvailable
CharUpperBuffA
RegisterClipboardFormatA
ModifyMenuA
GetDoubleClickTime
SetMenuDefaultItem
CopyAcceleratorTableA
DestroyAcceleratorTable
CreateAcceleratorTableA
LoadAcceleratorsW
ToAsciiEx
GetKeyboardState
MapVirtualKeyExA
IsCharLowerA
GetKeyboardLayout
PostThreadMessageA
GetComboBoxInfo
MonitorFromPoint
UpdateLayeredWindow
LockWindowUpdate
GetDCEx
UnionRect
FrameRect
SetScrollPos
CopyIcon
gdi32
GetTextMetricsA
DeleteObject
GetDeviceCaps
GetDIBits
GetPaletteEntries
PlgBlt
RealizePalette
SelectObject
SetDIBits
StretchBlt
CreateDIBSection
SetDIBColorTable
CreateHalftonePalette
GetTextAlign
Rectangle
Ellipse
DPtoLP
CopyMetaFileA
CreateDCA
CreateBitmap
SetBkColor
SetTextColor
GetBkColor
CreateCompatibleBitmap
CreateFontA
GetCharWidthA
StretchDIBits
CreateDIBPatternBrushPt
CreateHatchBrush
CreatePatternBrush
CreateRectRgn
Escape
ExcludeClipRect
GetClipRgn
GetCurrentPositionEx
GetObjectType
GetPixel
GetStockObject
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
OffsetClipRgn
PlayMetaFile
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetBkMode
SetMapperFlags
SetGraphicsMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetStretchBltMode
SetTextCharacterExtra
SetTextAlign
SetTextJustification
PlayMetaFileRecord
CreateFontIndirectA
SetWorldTransform
ModifyWorldTransform
SetColorAdjustment
StartDocA
ArcTo
PolyDraw
SelectClipPath
SetArcDirection
MoveToEx
TextOutA
ExtTextOutA
PolyBezierTo
PolylineTo
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateRectRgnIndirect
PatBlt
CloseMetaFile
DeleteMetaFile
EnumFontFamiliesExA
CombineRgn
GetMapMode
SetRectRgn
CreatePalette
GetNearestPaletteIndex
GetSystemPaletteEntries
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
SetPixel
CreateEllipticRgn
GetTextColor
CreatePolygonRgn
Polygon
Polyline
CreateRoundRectRgn
GetRgnBox
OffsetRgn
GetCurrentObject
RoundRect
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
ExtFloodFill
SetPaletteEntries
SetPixelV
GetWindowOrgEx
GetViewportOrgEx
CreateMetaFileA
EndDoc
StartPage
EndPage
AbortDoc
SetAbortProc
GetROP2
GetBkMode
GetNearestColor
GetPolyFillMode
GetStretchBltMode
GetTextExtentPointA
GetTextExtentPoint32W
GetTextFaceA
SetWindowOrgEx
SetWindowExtEx
SetViewportExtEx
LPtoDP
ExtCreatePen
CreateSolidBrush
CreatePen
SetMetaFileBitsEx
GetMetaFileBitsEx
DeleteDC
GetDCOrgEx
GetClipBox
GetObjectA
CreateCompatibleDC
BitBlt
EnumMetaFile
SetViewportOrgEx
GetTextExtentPoint32A
msimg32
AlphaBlend
TransparentBlt
winspool.drv
GetJobA
ClosePrinter
OpenPrinterA
DocumentPropertiesA
advapi32
GetFileSecurityA
SetFileSecurityA
RegEnumKeyExA
RegEnumValueA
RegOpenKeyExW
RegQueryValueA
RegEnumKeyA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA
RegSetValueA
RegCloseKey
GetUserNameA
shell32
SHBindToParent
SHGetFileInfoA
SHAddToRecentDocs
ExtractIconA
DragQueryFileA
DragFinish
SHGetPathFromIDListA
SHGetSpecialFolderLocation
ShellExecuteExA
SHAppBarMessage
SHBrowseForFolderA
SHGetMalloc
ShellExecuteA
SHGetDesktopFolder
shlwapi
PathFindExtensionA
PathFindFileNameA
PathRemoveExtensionA
PathIsUNCA
PathStripToRootA
PathRemoveFileSpecW
StrFormatKBSizeA
StrRetToBufA
uxtheme
GetCurrentThemeName
GetThemeColor
DrawThemeText
DrawThemeParentBackground
GetWindowTheme
IsThemeBackgroundPartiallyTransparent
GetThemePartSize
DrawThemeBackground
CloseThemeData
OpenThemeData
IsAppThemed
GetThemeSysColor
ole32
CLSIDFromProgID
OleRegGetMiscStatus
OleRegEnumVerbs
StgCreateDocfileOnILockBytes
WriteClassStm
GetHGlobalFromILockBytes
CreateGenericComposite
DoDragDrop
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
CreateFileMoniker
CreateILockBytesOnHGlobal
StgIsStorageFile
StgOpenStorageOnILockBytes
CreateItemMoniker
OleCreate
OleCreateFromData
OleCreateLinkFromData
OleCreateStaticFromData
OleCreateLinkToFile
OleCreateFromFile
OleLoad
OleSave
OleSaveToStream
OleSetContainedObject
OleGetIconOfClass
OleRun
CreateDataAdviseHolder
StgOpenStorage
StgCreateDocfile
OleLockRunning
OleSetMenuDescriptor
PropVariantCopy
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
OleSetClipboard
CLSIDFromString
CoDisconnectObject
StringFromGUID2
CoInitializeEx
CoInitialize
CoCreateInstance
CoCreateGuid
CoUninitialize
SetConvertStg
OleRegGetUserType
ReleaseStgMedium
OleDuplicateData
ReadFmtUserTypeStg
WriteFmtUserTypeStg
CreateBindCtx
CoTreatAsClass
WriteClassStg
ReadClassStg
CoTaskMemFree
CoTaskMemAlloc
StringFromCLSID
CreateStreamOnHGlobal
CreateOleAdviseHolder
GetRunningObjectTable
OleIsRunning
CoGetMalloc
OleQueryLinkFromData
OleQueryCreateFromData
CoFreeUnusedLibraries
OleInitialize
OleUninitialize
CoGetClassObject
CoRegisterClassObject
CoRegisterMessageFilter
oleaut32
SafeArrayLock
SafeArrayUnlock
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayGetElement
SafeArrayPutElement
SafeArrayCopy
SafeArrayPtrOfIndex
VariantCopy
VarCyFromStr
VarBstrFromCy
VarBstrFromDate
VarBstrFromDec
SafeArrayDestroy
SysAllocString
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayRedim
SafeArrayGetLBound
SafeArrayDestroyData
SafeArrayDestroyDescriptor
SysStringLen
RegisterTypeLi
LoadRegTypeLi
LoadTypeLi
VarDateFromStr
VariantTimeToSystemTime
SysStringByteLen
SystemTimeToVariantTime
SysAllocStringLen
VariantInit
VariantClear
VariantChangeType
SysFreeString
SafeArrayCreate
SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayGetUBound
VarDecFromStr
SysAllocStringByteLen
SysReAllocStringLen
oledlg
ord8
wsock32
WSAGetLastError
WSASetLastError
ntohs
htons
getsockname
getpeername
closesocket
bind
gdiplus
GdipGetImageEncodersSize
GdipGetImageEncoders
GdipCreateBitmapFromFile
GdipCreateBitmapFromFileICM
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipDrawImageI
GdiplusShutdown
GdipAlloc
GdipFree
GdiplusStartup
GdipCloneImage
GdipDisposeImage
GdipSaveImageToStream
GdipGetImageGraphicsContext
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePalette
GdipGetImagePaletteSize
GdipCreateBitmapFromStream
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromScan0
GdipCreateBitmapFromHBITMAP
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDeleteGraphics
oleacc
AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject
imm32
ImmReleaseContext
ImmGetOpenStatus
ImmGetContext
winmm
PlaySoundA
Sections
.text Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 576KB - Virtual size: 576KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 34KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ