C:\Users\LENOVO\source\repos\ConsoleApplication57\Release\ConsoleApplication57.pdb
Static task
static1
Behavioral task
behavioral1
Sample
232fb27cab3c043512a062f03fe23a866bbeda2167cc4a204453c55d59f0ac76.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
232fb27cab3c043512a062f03fe23a866bbeda2167cc4a204453c55d59f0ac76.exe
Resource
win10v2004-20240709-en
General
-
Target
5ed9dbdaf4a1e69546eca48a9005fa8d.bin
-
Size
16KB
-
MD5
877a4a8932713c06e387f20efe92d1b2
-
SHA1
ba43dd3524245b4a44d0ef198e500bfe112bb821
-
SHA256
e5b9881e2d6282e5993457f9d876d95deff360feb678a19b2ae6c2b06b311142
-
SHA512
a6ae23026cf8fded3e7b172307f37cdcfcff2166f8eca1363ba65e7ae8df29bb3a6911396250fde4bde6872c4aeda5038adf6fa4fd16a24e59dccdba80b4a55a
-
SSDEEP
384:sjaIBdCP+NX0gpMKkwweVEvz8C3G8kT3BAM0GUDlahQ3af/YCEU:go2d0gSKQu8kuM0zJaS3cd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/232fb27cab3c043512a062f03fe23a866bbeda2167cc4a204453c55d59f0ac76.exe
Files
-
5ed9dbdaf4a1e69546eca48a9005fa8d.bin.zip
Password: infected
-
232fb27cab3c043512a062f03fe23a866bbeda2167cc4a204453c55d59f0ac76.exe.exe windows:5 windows x86 arch:x86
Password: infected
8e11e854918d7edf4ce1bd10ab2f7d9d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
CreateFileA
WriteFile
CloseHandle
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetSystemTimeAsFileTime
msvcr90
__p__fmode
_encode_pointer
__set_app_type
_crt_debugger_hook
?terminate@@YAXXZ
__p__commode
__dllonexit
_lock
_onexit
_decode_pointer
_except_handler4_common
_invoke_watson
_controlfp_s
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
__initenv
exit
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
_unlock
memset
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 908B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 700B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 410B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
�u?�u~ Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE