mtxlegih.pdb
Static task
static1
Behavioral task
behavioral1
Sample
a122fabffbc9d4a8c68a71c633085470N.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a122fabffbc9d4a8c68a71c633085470N.dll
Resource
win10v2004-20240709-en
General
-
Target
a122fabffbc9d4a8c68a71c633085470N.exe
-
Size
167KB
-
MD5
a122fabffbc9d4a8c68a71c633085470
-
SHA1
bba1b27d03e18fda67b58ae756d2cfc4609ee4c0
-
SHA256
221367142fbb231e98cf2b8ace9dce68147fb0fc1940d9b594031cb83534ef93
-
SHA512
a4b7668fac207c9e1b5fbc5d6ffd99aa2e6d73fc48de46580388f3edebc70b3eb999c7c0518bf6949ddd502c5a5bee8d3899a10b561b1c7846f3740909ff2e0b
-
SSDEEP
3072:jb/Ec5C6KxSRbSgbeRivGjVYCmoJqihpjDKwIP6XBJavcOF3Jr2x:jb/ZNyQuMihpjG9KaPe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a122fabffbc9d4a8c68a71c633085470N.exe
Files
-
a122fabffbc9d4a8c68a71c633085470N.exe.dll windows:6 windows x86 arch:x86
7e8bedf22d26e5ae6e00993a3e6d4de9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcrt
_lock
__CxxFrameHandler3
_wstrdate
_wstrtime
_local_unwind4
__dllonexit
_wcsicmp
wcsrchr
memcpy
memset
_vsnwprintf
_waccess
wcstoul
_XcptFilter
_onexit
malloc
free
_initterm
_amsg_exit
_except_handler4_common
_unlock
kernel32
FreeLibrary
DisableThreadLibraryCalls
GetLocaleInfoW
InterlockedExchange
Sleep
InitializeCriticalSectionAndSpinCount
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InterlockedCompareExchange
OutputDebugStringW
IsDebuggerPresent
GetCurrentThread
GetThreadContext
DebugBreak
ExpandEnvironmentStringsW
FormatMessageW
LockResource
GetModuleFileNameW
LoadLibraryExW
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
LoadResource
FindResourceW
GetModuleHandleW
FindClose
DeleteFileW
SetFileAttributesW
FindNextFileW
FindFirstFileW
GetLastError
CloseHandle
GetExitCodeProcess
WaitForSingleObject
CreateProcessW
CreateDirectoryW
GetLocalTime
advapi32
OpenProcessToken
GetTokenInformation
RegSetValueExW
RegisterEventSourceW
ReportEventW
DeregisterEventSource
RegEnumKeyW
RegOpenKeyExW
RegQueryValueW
RegQueryValueExW
RegCloseKey
ole32
CoTaskMemFree
StringFromGUID2
CLSIDFromString
CoGetObjectContext
CoCreateInstance
CoTaskMemAlloc
oleaut32
LoadTypeLi
VariantClear
user32
SetDlgItemTextW
CloseWindowStation
CloseDesktop
GetProcessWindowStation
GetThreadDesktop
OpenWindowStationW
SetProcessWindowStation
EndDialog
SetThreadDesktop
GetDesktopWindow
GetWindowRect
GetClientRect
MapWindowPoints
SetWindowPos
LoadStringW
DialogBoxParamW
OpenDesktopW
version
VerQueryValueW
Exports
Exports
TryLegInterfaceFirst
Sections
.text Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 992B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 141KB - Virtual size: 141KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ