D:\Pcounter\NT\ACCOUNT\ACCOUNT\Release\ACCOUNT.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ACCOUNT.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
ACCOUNT.exe
Resource
win10v2004-20240709-en
General
-
Target
ACCOUNT.exe
-
Size
417KB
-
MD5
fe58f3c9773bb796ba77d998df32999e
-
SHA1
b85c02091eb0a91349a5a98942cfacbe334d2a57
-
SHA256
61fc4c16a48ee7eb14273e32fbef5cd0cd0f0a7859c1a4b657251a057b9d0421
-
SHA512
6c1035246a65bb3b1d591a6489b6cb1e7309135c99f346a585fbc86d18340df09023971d1ea741192eb1576809aa63ea8eeffc6ace1557c2d73e89ca2c5aa05d
-
SSDEEP
6144:vIhrawtaz2WFBcXD6MhXtK/5nP6Y2wFfB5+0JTAOLrN:vIhrfgz2UBcuMQnPfPFfuylB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ACCOUNT.exe
Files
-
ACCOUNT.exe.exe windows:5 windows x86 arch:x86
67f4d53c18e6b3a9485133e6c710b485
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
netapi32
DsEnumerateDomainTrustsA
NetGetDCName
DsGetDcNameW
NetGetJoinInformation
NetQueryDisplayInformation
NetGroupGetUsers
NetApiBufferFree
NetUserGetInfo
NetLocalGroupGetMembers
DsGetDcNameA
NetShareGetInfo
activeds
ord4
ord5
ord6
ord7
ord9
ntdsapi
DsUnBindA
DsBindW
DsCrackNamesA
DsUnquoteRdnValueA
DsBindA
DsUnBindW
DsFreeNameResultA
ws2_32
WSAStartup
gethostbyname
inet_ntoa
gethostname
kernel32
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetComputerNameA
CreateFileA
FindResourceA
SetFilePointer
FreeResource
GetLocaleInfoA
LoadResource
SystemTimeToTzSpecificLocalTime
GetTimeFormatA
GetWindowsDirectoryA
WriteFile
GetDriveTypeA
GlobalAlloc
GetPrivateProfileIntA
SizeofResource
GetFileAttributesA
GetTimeZoneInformation
GetEnvironmentVariableA
SetCurrentDirectoryA
SetLastError
GlobalFree
GetPrivateProfileStringA
GetLocalTime
WritePrivateProfileStringA
LockResource
GetModuleFileNameA
GetPrivateProfileSectionNamesA
GetModuleHandleA
GetVersionExA
CloseHandle
GetTempPathA
GetSystemTime
WideCharToMultiByte
GetSystemDirectoryA
MultiByteToWideChar
WritePrivateProfileStringW
GetTempPathW
GetPrivateProfileIntW
GetLastError
GetCurrentThreadId
DeleteFileW
WaitForSingleObject
Sleep
CreateMutexA
WriteConsoleW
DeleteFileA
FatalAppExitA
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetFileSize
SetEndOfFile
ReadFile
GlobalMemoryStatus
GetDiskFreeSpaceA
FlushFileBuffers
LockFile
UnlockFile
lstrlenA
lstrcpyA
FormatMessageA
GetConsoleCP
GetStringTypeW
GetStringTypeA
HeapReAlloc
VirtualAlloc
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
SetStdHandle
LCMapStringW
LCMapStringA
ExitProcess
RtlUnwind
GetStartupInfoA
GetFileType
GetCPInfo
GetStdHandle
SetHandleCount
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetProcAddress
GetModuleHandleW
LoadLibraryA
GetExitCodeProcess
CreateProcessA
CompareStringA
CompareStringW
SetEnvironmentVariableA
WriteConsoleA
LeaveCriticalSection
GetConsoleOutputCP
HeapSize
GetProcessHeap
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
HeapAlloc
HeapFree
GetCurrentDirectoryA
GetFullPathNameA
MoveFileA
GetCommandLineA
ReleaseMutex
RaiseException
IsValidCodePage
GetOEMCP
GetACP
InterlockedDecrement
InterlockedIncrement
GetSystemTimeAsFileTime
user32
CallWindowProcA
InvalidateRect
UpdateWindow
GetSysColor
GetWindowLongA
SetWindowPos
MoveWindow
OemToCharA
GetWindowRect
SetCursor
SetWindowLongA
SetFocus
SendMessageA
MessageBoxA
GetDlgItem
EndDialog
CheckDlgButton
IsDlgButtonChecked
SetWindowTextA
EnableWindow
LoadCursorA
GetDlgItemTextA
DialogBoxParamA
SetDlgItemTextA
GetSystemMetrics
SendDlgItemMessageA
wsprintfA
GetWindowTextA
MapWindowPoints
gdi32
SetBkColor
SetTextColor
GetTextFaceA
GetTextMetricsA
CreateFontIndirectA
SelectObject
GetTextExtentPoint32A
ExtTextOutA
DeleteObject
SetBkMode
advapi32
LookupAccountNameA
LookupAccountSidA
GetSidSubAuthority
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
ImpersonateLoggedOnUser
RevertToSelf
GetSidSubAuthorityCount
GetUserNameA
RegOpenKeyExA
RegQueryValueExA
RegEnumKeyA
shell32
ShellExecuteA
ole32
CoInitializeEx
oleaut32
SafeArrayGetLBound
VariantClear
SafeArrayGetUBound
SysFreeString
VariantInit
SafeArrayAccessData
Sections
.text Size: 326KB - Virtual size: 326KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ