D:\notepad2\notepad2\build\bin\Release\Win32\Notepad2.pdb
Static task
static1
Behavioral task
behavioral1
Sample
81e5a639ed8ec245ad52b03a16a65cf6f6ce4646566300a91cff1ed3687e3dd2.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
81e5a639ed8ec245ad52b03a16a65cf6f6ce4646566300a91cff1ed3687e3dd2.exe
Resource
win10v2004-20240226-en
General
-
Target
81e5a639ed8ec245ad52b03a16a65cf6f6ce4646566300a91cff1ed3687e3dd2
-
Size
2.0MB
-
MD5
1b6a4439e9caa20002813cf68340b100
-
SHA1
9d9ce51a536956b7e9f24408da3b418950f52ef3
-
SHA256
81e5a639ed8ec245ad52b03a16a65cf6f6ce4646566300a91cff1ed3687e3dd2
-
SHA512
e76c788a757755bfc980b9387551e3b49f6322a85a99a03f9257eed5c73d27f1c43b87680c11bbed99a3cad213a0fd596bd94a2774fe49e8c0f649b4153a7601
-
SSDEEP
49152:g0flCgJBQqgmCFxWHt/ZdfHf5p+2NK/tUesuOY+z:gGHJYmCFcHVvSZUerYz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 81e5a639ed8ec245ad52b03a16a65cf6f6ce4646566300a91cff1ed3687e3dd2
Files
-
81e5a639ed8ec245ad52b03a16a65cf6f6ce4646566300a91cff1ed3687e3dd2.exe windows:5 windows x86 arch:x86
6434b5b1ae79dcec38e532bc245ecc35
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
comctl32
InitCommonControlsEx
shlwapi
StrRetToBufW
imm32
ImmEscapeW
uxtheme
GetThemeSysFont
kernel32
MulDiv
user32
GetMenu
gdi32
DeleteDC
comdlg32
ChooseFontW
advapi32
RegDeleteKeyW
shell32
SHBrowseForFolderW
ole32
OleUninitialize
oleaut32
SysAllocStringLen
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 948KB - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ