ComputerHardwareIds.pdb
Static task
static1
Behavioral task
behavioral1
Sample
5ddf859e6ca2e70e5f170421e26caff0N.exe
Resource
win10v2004-20240709-en
General
-
Target
5ddf859e6ca2e70e5f170421e26caff0N.exe
-
Size
1.5MB
-
MD5
5ddf859e6ca2e70e5f170421e26caff0
-
SHA1
22e0ca8d13763428ed44504343b2d3da25fe07d9
-
SHA256
e8a1126de57f0f0a916c1eb06fb6fda88c70927169d06382190dcb0c1732a552
-
SHA512
5490e661deb0134319e3086845406b28ab0186df5b3cb25b0157f8af813952cfa64c3a0177e3e7f12c37ab41bb585c29aa3c61f80010380217d6db432d6476c8
-
SSDEEP
12288:UkxzcJsxDcaouKmZk3SPJ0Kpt91AfwQ8X2e/eVRlhwVQXGw/1+mgmwjjxo5:UimaouGSPGM9ZQ8GYelhwOXGEDgm6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5ddf859e6ca2e70e5f170421e26caff0N.exe
Files
-
5ddf859e6ca2e70e5f170421e26caff0N.exe.exe windows:10 windows x64 arch:x64
26284274dd19bd6814e0a94ae4e6b717
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
msvcrt
_initterm
__setusermatherr
_cexit
_exit
exit
__set_app_type
__C_specific_handler
_amsg_exit
_XcptFilter
wprintf
_fmode
wcschr
_vsnwprintf
_callnewh
malloc
free
_wtoi
_wcsdup
_wcsicmp
_commode
?terminate@@YAXXZ
memcpy
__wgetmainargs
memset
version
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
kernel32
QueryPerformanceCounter
GetLastError
MultiByteToWideChar
GetSystemFirmwareTable
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
GetModuleHandleW
SetUnhandledExceptionFilter
Sleep
bcrypt
BCryptCloseAlgorithmProvider
BCryptDestroyHash
BCryptOpenAlgorithmProvider
BCryptGetProperty
BCryptHashData
BCryptCreateHash
BCryptFinishHash
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 456B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE