C:\Users\buildbox\Source\gitlab-runner\builds\ceef2586\0\snxd\solid\host\Release\host.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2fd9429b678ff55da0895efb07ee2a4e4efa84a20b24af614c552f8b36024672.exe
Resource
win7-20240611-en
General
-
Target
2fd9429b678ff55da0895efb07ee2a4e4efa84a20b24af614c552f8b36024672
-
Size
2.3MB
-
MD5
0e00988d119632fc82830b9abaac1a34
-
SHA1
f7391b67b3209ec7bafeabb34b69bc754a3b2b12
-
SHA256
2fd9429b678ff55da0895efb07ee2a4e4efa84a20b24af614c552f8b36024672
-
SHA512
977c1762909fa15d436d6ea26845fb4294ad697bb493b6959619f97ee32041e0d180311bc5685b4f9b0b8430ab27aa5dff67744905d03cb5d2c4f1a074dd6264
-
SSDEEP
49152:hb9ugiPjhdmwGXJt5xTqv5INYN40iYHptLIokJyI:hb9ugQdmwaJrJYNvHptLZ6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2fd9429b678ff55da0895efb07ee2a4e4efa84a20b24af614c552f8b36024672
Files
-
2fd9429b678ff55da0895efb07ee2a4e4efa84a20b24af614c552f8b36024672.exe windows:6 windows x86 arch:x86
c170e48870bfa581a9b1ffe2a7d72e56
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
version
GetFileVersionInfoW
VerQueryValueA
GetFileVersionInfoExW
GetFileVersionInfoSizeW
GetFileVersionInfoSizeExW
kernel32
EnterCriticalSection
FlushInstructionCache
GetCurrentProcess
TerminateProcess
GetModuleHandleW
CompareStringW
GlobalAlloc
GlobalFree
GetLastError
DeleteFileW
SetEnvironmentVariableW
GetCommandLineW
ReadFile
QueryDosDeviceW
SetConsoleCtrlHandler
GetStdHandle
WriteFile
DeviceIoControl
CreateNamedPipeW
GetProcessId
GetEnvironmentVariableW
PeekNamedPipe
WaitForSingleObject
LocalAlloc
CreateFileW
GetSystemDirectoryW
GetModuleHandleA
DisconnectNamedPipe
OpenProcess
CreateToolhelp32Snapshot
MoveFileWithProgressW
Process32NextW
CreateFileA
Process32FirstW
CloseHandle
FreeConsole
LoadLibraryW
GetWindowsDirectoryW
GetProcAddress
LocalFree
VerSetConditionMask
GlobalMemoryStatusEx
SetThreadExecutionState
VerifyVersionInfoW
WaitNamedPipeW
AllocConsole
SetConsoleTitleW
IsDebuggerPresent
FlushFileBuffers
GetExitCodeProcess
CreateDirectoryW
FindFirstFileW
SetLastError
FindNextFileW
GetDiskFreeSpaceW
RemoveDirectoryW
SetFileTime
GetModuleFileNameW
SetThreadPriority
SetEndOfFile
GetTempPathW
FindClose
GetLocaleInfoW
GetFileAttributesW
GetCurrentThreadId
SetFileAttributesW
Sleep
GetFileAttributesExW
GetUserDefaultLCID
FileTimeToSystemTime
GetCurrentThread
GetNativeSystemInfo
RaiseException
GetCurrentDirectoryW
MoveFileExW
GetCurrentProcessId
SystemTimeToFileTime
FreeLibrary
CopyFileExW
VirtualQuery
GetQueuedCompletionStatus
PostQueuedCompletionStatus
CreateIoCompletionPort
GetFileInformationByHandle
SetFilePointerEx
GetTickCount
IsProcessorFeaturePresent
IsBadReadPtr
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
CreateEventW
SetEvent
ResetEvent
ReleaseSemaphore
OpenSemaphoreW
CreateSemaphoreW
MulDiv
RtlCaptureContext
TerminateThread
CreateThread
VirtualQueryEx
SetUnhandledExceptionFilter
SetNamedPipeHandleState
WaitForMultipleObjects
TransactNamedPipe
GetSystemInfo
VirtualProtect
LoadLibraryExA
UnhandledExceptionFilter
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
GetStartupInfoW
RtlUnwind
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
MultiByteToWideChar
GetConsoleMode
ReadConsoleW
WideCharToMultiByte
GetConsoleCP
ExitProcess
GetModuleHandleExW
SetStdHandle
GetFileType
ExitThread
FreeLibraryAndExitThread
GetModuleFileNameA
GetACP
HeapFree
HeapAlloc
WriteConsoleW
LCMapStringW
GetTimeZoneInformation
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
GetStringTypeW
GetProcessHeap
HeapSize
HeapReAlloc
DecodePointer
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 288KB - Virtual size: 288KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 78KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ