x:\werdon.pdb
Static task
static1
Behavioral task
behavioral1
Sample
029c8b53ec038fd7b81d7912b67b2780N.exe
Resource
win7-20240708-en
General
-
Target
029c8b53ec038fd7b81d7912b67b2780N.exe
-
Size
172KB
-
MD5
029c8b53ec038fd7b81d7912b67b2780
-
SHA1
8c20f6c81c61faa2c98f640528a1b65d8a211a9b
-
SHA256
28906954940b700dfcbcf04dc821af3531e4c9bdbd10d12fd99ef2562c6b96fe
-
SHA512
4097547e1fbee36d7b713f0c48263f9420ca87f1d334331a3330e061e07f2217258ae8cdb08fc5b44303138f0f332626ec394eaec92b5d0cc572cd8ba87a0d3d
-
SSDEEP
1536:MxrQYodK5zOr/fDxEZUt07j8gIJ68twh6yTBcopyp/Gu/uM:gLuK5SztEZkIj8JrWFBlpyAu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 029c8b53ec038fd7b81d7912b67b2780N.exe
Files
-
029c8b53ec038fd7b81d7912b67b2780N.exe.exe windows:4 windows x86 arch:x86
a059c871e61a22eb78e828f732efdb0e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetLastError
GetLocaleInfoW
GetFullPathNameA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
SetUnhandledExceptionFilter
user32
IsDlgButtonChecked
FindWindowExW
BringWindowToTop
CreateDialogParamW
RegisterClipboardFormatW
LoadMenuW
GetSubMenu
GetMenuItemInfoW
DestroyMenu
IsWindowEnabled
CheckDlgButton
GetFocus
MessageBoxW
SetWindowTextW
WinHelpW
SetFocus
SetDlgItemTextW
SetDlgItemInt
UnhookWindowsHookEx
ShowWindow
PostMessageW
DestroyWindow
GetWindowTextW
DialogBoxParamW
EnableWindow
GetDC
SendDlgItemMessageW
LoadBitmapW
LoadIconW
LoadStringW
wsprintfW
GetWindowTextLengthW
SetWindowLongW
GetClientRect
SendMessageW
GetDlgItem
EndDialog
GetParent
GetWindowLongW
GetDlgItemTextW
IsWindow
GetWindowThreadProcessId
CallNextHookEx
SetWindowsHookExW
GetActiveWindow
GetDlgItemInt
shell32
SHBrowseForFolderW
SHGetPathFromIDListW
Sections
.text Size: 112KB - Virtual size: 110KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ