t:\mso\x86\ship\0\smarttaginstall.pdb
Static task
static1
Behavioral task
behavioral1
Sample
fcf4db957c1048f6a9dc52ab47d8a520N.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
fcf4db957c1048f6a9dc52ab47d8a520N.exe
Resource
win10v2004-20240709-en
General
-
Target
fcf4db957c1048f6a9dc52ab47d8a520N.exe
-
Size
1.4MB
-
MD5
fcf4db957c1048f6a9dc52ab47d8a520
-
SHA1
24bddad518d1d43a06fb024a00049c0b7cb01a03
-
SHA256
500a431f78e284d0db64dd01186a558869694dc1a2ef5737c2b86edb2ff70df7
-
SHA512
7a0aa391c35a4b077a06d45ac3c65c74ceda3359f38ef7e6068a0978f5b74ec0d1ac8c942e144b08a1cfa5522aaf4e835aab7e8962d39f800ea7407068310de9
-
SSDEEP
12288:X7d0NxksRpWE9FRHSfNm1wgbIxnBw7dzE+e3gxZC6LgjigDy5fdv8fWi+/:XCks7WE9F5pwg8zmdqQjC60jiHkU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fcf4db957c1048f6a9dc52ab47d8a520N.exe
Files
-
fcf4db957c1048f6a9dc52ab47d8a520N.exe.exe windows:4 windows x86 arch:x86
e4d7135f53800e9f0dd3e9cf2f6d1649
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
RegisterWindowMessageA
SendMessageA
msvcr80
__set_app_type
_crt_debugger_hook
_unlock
__dllonexit
_encode_pointer
_onexit
_decode_pointer
_except_handler4_common
_invoke_watson
_controlfp_s
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
_lock
kernel32
IsDebuggerPresent
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
GetModuleHandleW
GetProcAddress
GetProcessHeap
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
VirtualProtect
UnhandledExceptionFilter
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 892B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE