D:\Workspaces\Setup\HotFix 2\Release\HotFixStubSfx.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ee01aff20ce95bdc7f90c03a1324026d349319524902f7503e0ac4c3fc413f8f.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
ee01aff20ce95bdc7f90c03a1324026d349319524902f7503e0ac4c3fc413f8f.exe
Resource
win10v2004-20240611-en
General
-
Target
ee01aff20ce95bdc7f90c03a1324026d349319524902f7503e0ac4c3fc413f8f
-
Size
2.6MB
-
MD5
9e70e1ff778fa5b64fcd121b24343226
-
SHA1
5d589bd77a3d01309d97c9adcbdea2996205fd92
-
SHA256
ee01aff20ce95bdc7f90c03a1324026d349319524902f7503e0ac4c3fc413f8f
-
SHA512
1181ee4a06679c66b911799e9b11c6364b1ac862123a2fafac9fa6d5acf7bfa278934ec2d6f0c1a1521a82753a2687e1fbd5583e72163bbf19ba327a91b43e54
-
SSDEEP
49152:wSGTsdyv8Y2oaiBIntB0WQzUie8GYRfCVJtw1bplaEekyIGOe3BtH5Z:NdyR2oFwQWQzUi1Ra3tw1bp3ekyhBtHL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ee01aff20ce95bdc7f90c03a1324026d349319524902f7503e0ac4c3fc413f8f
Files
-
ee01aff20ce95bdc7f90c03a1324026d349319524902f7503e0ac4c3fc413f8f.exe windows:5 windows x86 arch:x86
e63bbc66ab4ed8778265a4be9b91bdf0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
DecodePointer
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
WaitForSingleObject
OpenMutexW
CreateProcessW
WriteFile
Sleep
SetFilePointer
GetCommandLineW
LoadLibraryW
RaiseException
ReadFile
CreateFileW
GetProcAddress
CloseHandle
LocalFree
OutputDebugStringW
GetModuleFileNameW
WriteConsoleW
FlushFileBuffers
SetEndOfFile
HeapSize
MoveFileExW
GetFileSize
SetFilePointerEx
FreeLibrary
CreateMutexW
GetLastError
GetExitCodeProcess
FormatMessageW
GetProcessHeap
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindFirstFileExW
FindResourceExW
LoadResource
WideCharToMultiByte
MultiByteToWideChar
GetModuleHandleW
GetTempPathW
GetCurrentProcess
GetFullPathNameW
DeleteFileW
RemoveDirectoryW
GetFileAttributesW
CreateDirectoryW
FindFirstFileW
FindNextFileW
FindClose
GetStringTypeW
EnterCriticalSection
LeaveCriticalSection
EncodePointer
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
CompareStringW
LCMapStringW
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
RtlUnwind
LoadLibraryExW
SetFileTime
TzSpecificLocalTimeToSystemTime
SystemTimeToFileTime
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
GetStdHandle
GetACP
GetTimeZoneInformation
HeapFree
HeapAlloc
HeapReAlloc
GetFileType
SetStdHandle
GetConsoleMode
ReadConsoleW
GetConsoleCP
user32
CreateDialogParamW
OffsetRect
MessageBoxW
GetDlgItem
ShowWindow
GetWindowRect
SetWindowPos
SendMessageW
DestroyWindow
TranslateMessage
PeekMessageW
DispatchMessageW
GetDesktopWindow
gdi32
CreateSolidBrush
GetStockObject
SetBkMode
advapi32
FreeSid
CheckTokenMembership
AllocateAndInitializeSid
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
shell32
SHGetFolderPathW
CommandLineToArgvW
wintrust
WinVerifyTrust
rpcrt4
UuidCreate
RpcStringFreeW
UuidToStringW
Sections
.text Size: 151KB - Virtual size: 151KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 161KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ