E:\Develop_tools\loadproc\Release\loadproc.pdb
Static task
static1
Behavioral task
behavioral1
Sample
bf746ddf24fe1c798d9a608efbe62ee3fba150baae7205ee30ca74f32520b0d7.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
bf746ddf24fe1c798d9a608efbe62ee3fba150baae7205ee30ca74f32520b0d7.exe
Resource
win10v2004-20240508-en
General
-
Target
bf746ddf24fe1c798d9a608efbe62ee3fba150baae7205ee30ca74f32520b0d7
-
Size
609KB
-
MD5
15c41d980bfe99dcf623d4ec20b06b0c
-
SHA1
155327077902ae97ec3205f0474d2bdaadf8ee3e
-
SHA256
bf746ddf24fe1c798d9a608efbe62ee3fba150baae7205ee30ca74f32520b0d7
-
SHA512
54a064434b4c8a3249d83824e62a3cd6c425f5894c24488303a1506447be864102b95b17e88f1cdf20dca427fddae3b4d17af57a9d9dc0977c2a112f26fe378f
-
SSDEEP
12288:VzWrw+iN13I7g9w/fZA4/HdYvPpJr3oH/KBYcbvB8s:VzH3IbA4lIrYH/KGA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bf746ddf24fe1c798d9a608efbe62ee3fba150baae7205ee30ca74f32520b0d7
Files
-
bf746ddf24fe1c798d9a608efbe62ee3fba150baae7205ee30ca74f32520b0d7.exe windows:6 windows x86 arch:x86
7b0f0c8456f3a660c50edefb94863879
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetModuleFileNameA
FindFirstFileA
SetWaitableTimer
TlsSetValue
GetConsoleScreenBufferInfo
VerifyVersionInfoA
SetLastError
SetConsoleTextAttribute
EnterCriticalSection
GetStdHandle
WriteConsoleA
WriteFile
WaitForMultipleObjects
FindNextFileA
InitializeCriticalSectionAndSpinCount
GetDynamicTimeZoneInformation
LeaveCriticalSection
GetQueuedCompletionStatus
CreateMutexW
FindClose
WaitForSingleObject
GetCurrentThreadId
ReleaseMutex
PostQueuedCompletionStatus
CreateEventW
GetConsoleMode
FormatMessageW
GetLastError
SetEvent
TerminateThread
TlsAlloc
CloseHandle
FreeConsole
QueueUserAPC
LocalFree
DeleteCriticalSection
VerSetConditionMask
GetCurrentProcessId
WideCharToMultiByte
SleepEx
TlsGetValue
TlsFree
FormatMessageA
CreateIoCompletionPort
RegisterWaitForSingleObject
CreateWaitableTimerA
UnregisterWaitEx
CreateProcessA
WriteConsoleW
HeapSize
CreateFileW
SetStdHandle
RaiseException
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
InitializeCriticalSectionEx
TryEnterCriticalSection
WaitForSingleObjectEx
GetExitCodeThread
QueryPerformanceCounter
QueryPerformanceFrequency
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcAddress
EncodePointer
DecodePointer
MultiByteToWideChar
LCMapStringEx
GetStringTypeW
GetCPInfo
IsValidCodePage
IsDBCSLeadByteEx
ResetEvent
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsDebuggerPresent
GetStartupInfoW
InitializeSListHead
RtlUnwind
FreeLibrary
LoadLibraryExW
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
SetConsoleCtrlHandler
ExitProcess
GetModuleFileNameW
GetCommandLineA
GetCommandLineW
GetFileSizeEx
SetFilePointerEx
GetFileType
HeapAlloc
HeapFree
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetTimeZoneInformation
FlushFileBuffers
GetConsoleOutputCP
ReadFile
ReadConsoleW
HeapReAlloc
FindFirstFileExW
FindNextFileW
GetACP
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
SetEndOfFile
ws2_32
WSAStartup
WSACleanup
Sections
.text Size: 446KB - Virtual size: 445KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 114KB - Virtual size: 113KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 22KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ