ifilttst.pdb
Static task
static1
Behavioral task
behavioral1
Sample
497532455bb51d7a1665716b4cd15736e22832e1d9da3a6042ee38f632ae5b7e.exe
Resource
win10v2004-20240508-en
General
-
Target
497532455bb51d7a1665716b4cd15736e22832e1d9da3a6042ee38f632ae5b7e
-
Size
1.5MB
-
MD5
59cfe6f13253ea23cc957da943a4e0dd
-
SHA1
0b7a59d77022aec60570685fd69f95923c101d3a
-
SHA256
497532455bb51d7a1665716b4cd15736e22832e1d9da3a6042ee38f632ae5b7e
-
SHA512
8b43d1cf044ed60d7c3f49ee1ed62fdbb0ef764bd9045fe31aa57e10ae3296daa22751c6edb00b93a23d4d6dc676c0fae959d9f9d12db486f5818c15301ed2ae
-
SSDEEP
12288:ZW7i1sXYuHa53u4wU0VZAsztwy9IU6FpbOI+Xs:I7ksIuHa53YUS9wLDFRW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 497532455bb51d7a1665716b4cd15736e22832e1d9da3a6042ee38f632ae5b7e
Files
-
497532455bb51d7a1665716b4cd15736e22832e1d9da3a6042ee38f632ae5b7e.exe windows:10 windows x64 arch:x64
bf1d07799190adc65bc0de67cb6c0fd0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
kernel32
GetFullPathNameW
GetModuleFileNameA
GetSystemTimeAsFileTime
FindFirstFileW
CreateSemaphoreExW
HeapFree
SetLastError
EnterCriticalSection
FindNextFileW
ReleaseSemaphore
GetModuleHandleExW
WaitForMultipleObjects
LeaveCriticalSection
InitializeCriticalSection
FindClose
WaitForSingleObject
GetFileAttributesW
GetCurrentThreadId
ReleaseMutex
QueryPerformanceCounter
CreateEventW
Sleep
FormatMessageW
GetLastError
OutputDebugStringW
SetEvent
WaitForSingleObjectEx
OpenSemaphoreW
CloseHandle
CreateThread
HeapSetInformation
HeapAlloc
GetProcAddress
CreateMutexExW
DeleteCriticalSection
GetCurrentProcessId
GetProcessHeap
GetModuleHandleW
CreateSemaphoreW
DebugBreak
IsDebuggerPresent
GetPrivateProfileIntW
GetPrivateProfileStringW
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
GetCommandLineW
VirtualFree
VirtualAlloc
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetTickCount
ole32
PropVariantClear
CoTaskMemFree
CoCreateInstance
CLSIDFromString
OleUninitialize
OleInitialize
ntdll
NtQuerySystemInformation
query
LoadIFilter
msvcrt
fwprintf
exit
_vsnwprintf
memcpy_s
_wtoi
??1exception@@UEAA@XZ
??0exception@@QEAA@XZ
??0exception@@QEAA@AEBV0@@Z
_vsnprintf_s
?_set_new_handler@@YAP6AH_K@ZP6AH0@Z@Z
wcsrchr
_wcsicmp
wcstok
wcsstr
wcstoul
time
_wasctime
localtime
malloc
fputwc
free
_XcptFilter
_amsg_exit
__wgetmainargs
__set_app_type
_exit
_cexit
__setusermatherr
_initterm
_fmode
_commode
?terminate@@YAXXZ
_lock
_unlock
__dllonexit
_onexit
??1type_info@@UEAA@XZ
__iob_func
memset
_wfopen
fclose
wprintf
__C_specific_handler
__CxxFrameHandler3
memcpy
_callnewh
memcmp
_CxxThrowException
wcscmp
Sections
.text Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE