c:\builds\dominica_client_hfa2\dominica_client_hfa2_build\Release\Header.pdb
Static task
static1
Behavioral task
behavioral1
Sample
5e696d3c0fc5e0c9eb1427bb59303800N.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5e696d3c0fc5e0c9eb1427bb59303800N.exe
Resource
win10v2004-20240709-en
General
-
Target
5e696d3c0fc5e0c9eb1427bb59303800N.exe
-
Size
1023KB
-
MD5
5e696d3c0fc5e0c9eb1427bb59303800
-
SHA1
952837c8c266b9f07fc5cafeacf9c7d584d0b091
-
SHA256
e04169050af59d423e82da6da9ae460725d4be718117929c24ea53e0aace5126
-
SHA512
71c665b1baab95b5616bcc456cb932b2b6bc7889855d9be56a14be5a8afaa471cb07ac71ec814c063e8e2c62d751e116a9ec065e41c1a076356e1cddff4a475c
-
SSDEEP
12288:UcAaoq1VTkgym3j1UOGFkgT5GbTso0NpJjJFOhQpFJQsT3tH/2k7T4eV+laMys0:VTkgtFngdGbTZ8jgQpFJ3+I+qX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5e696d3c0fc5e0c9eb1427bb59303800N.exe
Files
-
5e696d3c0fc5e0c9eb1427bb59303800N.exe.exe windows:5 windows x86 arch:x86
c8ed1853d07089e46651eed00d387a07
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
version
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
shell32
CommandLineToArgvW
SHGetSpecialFolderPathW
SHCreateDirectoryExW
shlwapi
PathFindFileNameW
PathFindFileNameA
PathFileExistsA
PathFindOnPathW
PathFileExistsW
kernel32
ExitProcess
CloseHandle
ReleaseMutex
CopyFileW
SetCurrentDirectoryW
GetModuleFileNameW
GetLastError
CreateMutexW
CreateDirectoryW
ExpandEnvironmentStringsW
GetCommandLineW
GetLocalTime
LocalFree
FormatMessageW
InitializeCriticalSection
GetCurrentProcessId
GetCurrentThreadId
SetLastError
FindNextFileW
GetTickCount
LeaveCriticalSection
EnterCriticalSection
WaitForSingleObject
GetCurrentDirectoryW
Sleep
GetProcAddress
FreeLibrary
RaiseException
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
FlushInstructionCache
GetCurrentProcess
FindFirstFileW
WideCharToMultiByte
ReadFile
GetFileSize
CreateFileW
GetModuleHandleW
SetFileAttributesA
CreateDirectoryA
WriteFile
TerminateProcess
MoveFileExW
RemoveDirectoryW
GetExitCodeProcess
CreateProcessW
InterlockedExchange
InterlockedDecrement
InterlockedIncrement
HeapSize
HeapReAlloc
HeapDestroy
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
HeapAlloc
TlsSetValue
GetProcessHeap
HeapFree
InterlockedCompareExchange
DeleteCriticalSection
TlsFree
DeleteFileW
FindClose
MultiByteToWideChar
GetUserDefaultLCID
GetStringTypeExW
LCMapStringA
LCMapStringW
RtlUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
GetCPInfo
GetStartupInfoW
GetStringTypeW
TlsGetValue
WriteConsoleW
SetEndOfFile
CompareStringA
CompareStringW
GetConsoleOutputCP
WriteConsoleA
CreateFileA
InitializeCriticalSectionAndSpinCount
SetStdHandle
GetLocaleInfoW
IsValidLocale
EnumSystemLocalesA
GetStdHandle
GetModuleFileNameA
SetHandleCount
TlsAlloc
DeleteFileA
GetLocaleInfoA
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetEnvironmentVariableA
FlushFileBuffers
GetConsoleMode
GetConsoleCP
GetStringTypeA
IsValidCodePage
GetOEMCP
GetACP
GetModuleHandleA
HeapCreate
SetFilePointer
GetStartupInfoA
GetFileType
user32
LoadStringW
SetWindowLongW
CreateDialogParamW
UpdateWindow
ShowWindow
MessageBoxW
CloseDesktop
SetWindowTextW
SetTimer
GetDlgItem
DestroyWindow
UnregisterClassA
CreateDesktopW
advapi32
RegCreateKeyExW
CryptReleaseContext
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
CryptAcquireContextW
CryptCreateHash
CryptHashData
CryptGetHashParam
CryptDestroyHash
oleaut32
SysAllocString
Sections
.text Size: 355KB - Virtual size: 355KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 67KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 114KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ