Cert2Spc.pdb
Static task
static1
Behavioral task
behavioral1
Sample
5946df8d3093a8762cecd36bf24225c0N.exe
Resource
win10v2004-20240709-en
General
-
Target
5946df8d3093a8762cecd36bf24225c0N.exe
-
Size
580KB
-
MD5
5946df8d3093a8762cecd36bf24225c0
-
SHA1
ef3f24ec2a0072101e8071d83f2a6ec64d5f60ae
-
SHA256
2a60751dd516191e5630b991dd02cf2a0144b111158a6ffdb84eb0d83d869f93
-
SHA512
d7965ceeb4da8132a4d216667014f88b00500cc02d9076e2dd9b619e43c1373f8ab84d845e7f9e340f7c3b85c3e4abd65eacbc56641e88c89af3cabac57b70e5
-
SSDEEP
12288:03Dbif4YAJ93y1NrLiLtJ8nBxu7DCOzRq8DvQgqAbhI:0Hofe3y1sInB2COzRq8DvFqt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5946df8d3093a8762cecd36bf24225c0N.exe
Files
-
5946df8d3093a8762cecd36bf24225c0N.exe.exe windows:10 windows x64 arch:x64
6fbab9a22c6679e90186f2c71b342d49
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
kernel32
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetTickCount
GetSystemTimeAsFileTime
GetCurrentProcess
GetCurrentProcessId
QueryPerformanceCounter
GetModuleHandleW
SetUnhandledExceptionFilter
Sleep
TerminateProcess
CreateFileMappingA
GetFileSize
MapViewOfFile
GetProcessHeap
HeapSetInformation
CreateFileW
CloseHandle
GetLastError
GetModuleHandleA
UnmapViewOfFile
GetCurrentThreadId
msvcrt
?terminate@@YAXXZ
_commode
_fmode
__C_specific_handler
_initterm
__setusermatherr
_cexit
_exit
__set_app_type
__wgetmainargs
_amsg_exit
_XcptFilter
vwprintf
exit
crypt32
CertGetCRLFromStore
CertOpenStore
CertCloseStore
CertAddEncodedCRLToStore
CertEnumCertificatesInStore
CertSaveStore
CertAddCertificateContextToStore
CertAddCRLContextToStore
CertFreeCertificateContext
CertFreeCRLContext
user32
LoadStringW
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 228B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 568KB - Virtual size: 572KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE