iccvid.pdb
Static task
static1
Behavioral task
behavioral1
Sample
1f150da3464419d0cc813b030acc10e0N.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
1f150da3464419d0cc813b030acc10e0N.dll
Resource
win10v2004-20240709-en
General
-
Target
1f150da3464419d0cc813b030acc10e0N.exe
-
Size
221KB
-
MD5
1f150da3464419d0cc813b030acc10e0
-
SHA1
6c4100d1ff342a219c357a3b2736713c30e789e5
-
SHA256
96cd73ac98ff2b70b215f1392d923246814bef199de95ccd2d60720b5c04c82d
-
SHA512
03dda3b26361c30353ff529afadb11b0951dc42c54949fe3a2f18f2acd5e66626d0b17321e99dcecc83576af3ddbf7a2777a6342afbdc77f8594e60c36acf924
-
SSDEEP
3072:S3r8uQe3somaHfqGYoMw6RbSIYNJIIbYCmowFihpsXwRIEXBJFIcvv:O8vyxmmFYTOX0ihpsgdF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1f150da3464419d0cc813b030acc10e0N.exe
Files
-
1f150da3464419d0cc813b030acc10e0N.exe.dll windows:6 windows x86 arch:x86
d097cc8bf8981b0c9dc8c184d9104784
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcrt
_initterm
_amsg_exit
_except_handler4_common
free
malloc
_XcptFilter
_vsnprintf
memcpy
_setjmp3
longjmp
memmove
user32
DialogBoxParamA
EndDialog
SetWindowTextA
SendDlgItemMessageA
LoadBitmapA
BeginPaint
GetDlgItem
GetWindowRect
ScreenToClient
EndPaint
GetDC
ReleaseDC
LoadStringA
kernel32
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
lstrlenA
GetModuleFileNameA
MultiByteToWideChar
DisableThreadLibraryCalls
DebugBreak
LocalAlloc
GetPrivateProfileIntA
MulDiv
LocalFree
winmm
DefDriverProc
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
gdi32
DeleteObject
GetObjectA
CreateCompatibleDC
SelectObject
BitBlt
DeleteDC
GetSystemPaletteEntries
Exports
Exports
DriverProc
Sections
.text Size: 67KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 142KB - Virtual size: 141KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ