scrnsave.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2f061ad27345e3afe9d5d3b1d48d39e0N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2f061ad27345e3afe9d5d3b1d48d39e0N.exe
Resource
win10v2004-20240709-en
General
-
Target
2f061ad27345e3afe9d5d3b1d48d39e0N.exe
-
Size
35KB
-
MD5
2f061ad27345e3afe9d5d3b1d48d39e0
-
SHA1
394da17e8ecd72c1dd1df6b7f981c1c1d9066171
-
SHA256
8715f7233f183cb9c2bda19d287b7a1b8eed76e13a6f623c4c21a756fcbb3b94
-
SHA512
887c5d51f7308649f60037073b4dd38e8a2d908f3959081532634802da9c0bc2217f149d67589a8a5f5e5fc673d741ae1565cb26ae12ed5cbc6e80cd9a1362de
-
SSDEEP
768:/+E23zKdoTA2t9toCMA0eaHVbIMPQYNA4CH6/dzDlgO4Vk9gBuz:k3zwV2t/0vHVbIMIYKE/dHlg4i
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f061ad27345e3afe9d5d3b1d48d39e0N.exe
Files
-
2f061ad27345e3afe9d5d3b1d48d39e0N.exe.exe windows:5 windows x86 arch:x86
83ac3435ce75a7addd17a1fe2144a37d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
GetMessageA
TranslateMessage
DispatchMessageA
LoadStringA
GetActiveWindow
MessageBoxA
LoadCursorA
RegisterClassA
GetDC
ReleaseDC
RegisterWindowMessageA
IsRectEmpty
GetSystemMetrics
CreateWindowExA
SetCursor
PostQuitMessage
GetCursorPos
PostMessageA
DefWindowProcA
gdi32
GetClipBox
GetStockObject
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
exit
_cexit
_XcptFilter
_exit
_c_exit
strchr
atoi
__initenv
kernel32
OpenFile
GetVersionExA
GetModuleHandleA
GetCommandLineA
QueryPerformanceCounter
GetTickCount
LoadLibraryA
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetProcAddress
GetCurrentThreadId
FreeLibrary
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 692B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE