C:\Users\win10\AppData\Local\Temp\Y\SM\debug\win32\debuger\SM.pdb
Static task
static1
Behavioral task
behavioral1
Sample
4055aa05ea0c8bb5dfa8710afcc9e9d45b6efe46b0fde6a158967305beb25561.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4055aa05ea0c8bb5dfa8710afcc9e9d45b6efe46b0fde6a158967305beb25561.exe
Resource
win10v2004-20240802-en
General
-
Target
4055aa05ea0c8bb5dfa8710afcc9e9d45b6efe46b0fde6a158967305beb25561
-
Size
11.9MB
-
MD5
6ccfe38156e37a182a44ee2784bc9436
-
SHA1
9128409b61d193f9b52818f1ae06223187fe0e9b
-
SHA256
4055aa05ea0c8bb5dfa8710afcc9e9d45b6efe46b0fde6a158967305beb25561
-
SHA512
96fc8a81852a0e9cb147620188642aa2c02945311035de6ba1c59e9e45e397dc861fc376a940db1eb55103ac49fa1f2fedaf5938afd1587751c0e8a63082353a
-
SSDEEP
196608:3qi1i6pSDy/yBNApUfQof02ziMVh9WTc0DlZgg5XUL4djEwTorVNbPd9xXaZwL81:3qi1i6pGfPITtlZr5XULMWhNbPpKZwLK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4055aa05ea0c8bb5dfa8710afcc9e9d45b6efe46b0fde6a158967305beb25561
Files
-
4055aa05ea0c8bb5dfa8710afcc9e9d45b6efe46b0fde6a158967305beb25561.exe windows:6 windows x86 arch:x86
7f4437252cd802f48cc47efa71c11fd5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetVersionExW
ResumeThread
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
MonitorFromRect
gdi32
CreateDiscardableBitmap
advapi32
GetFileSecurityW
shell32
SHBrowseForFolderW
ole32
OleCreateFromData
oleaut32
VarCmp
comctl32
ImageList_Destroy
msimg32
TransparentBlt
shlwapi
StrFormatKBSizeW
uxtheme
GetThemePartSize
oledlg
OleUIInsertObjectW
gdiplus
GdipDrawImageRectI
ws2_32
WSAStartup
oleacc
CreateStdAccessibleObject
imm32
ImmReleaseContext
winmm
PlaySoundW
winspool.drv
OpenPrinterW
Exports
Exports
?get_active_implementation@simdutf@@YAAAV?$atomic_ptr@$$CBVimplementation@simdutf@@@internal@1@XZ
?get_available_implementations@simdutf@@YAABVavailable_implementation_list@internal@1@XZ
�e���0�-4���U� ����CN��:!���\�pϡ{��2КO�4��P�~���]|w֍ڠ>��v�_V��|�Iqv[fg�N@m�j�XK)�R���L�v�e���N.<k�۰�0�Ĥ�X\k�|�Z��pRU����=�T�}!i&,�0�B��w6�|�ϕ5:����5�jAa��W��>T��~ʂ�MneSۇA�f1��u��@H�W��@��h�)[W�_��M��:��n%Gf�ׅ�_��S�����k�,�3R���\O��e�g������+*O�7i�tY��f�N�1|�s��ƳO ��>˫�_����1GP_H�������Ҁ_�� �v�����nw��SQ���du�dW�!0O9u�o�p��Bu�./:w**yMrDl�iz|�j*�u�����y�|љ�a!�ɝ\�qă��,PO����%�(��&�����DU�LӮ�(4Z)����=����e( ��Ć6���R'2o�E� b 3L��]Q���c����}��,���-�E��PyR�����\�Y���&���p��9���'����!�N�lq�}M�!Ll���w��@ӏUю�D�P��HY�3��+f�Q�58�ۧ?l0A�a��oq6��!��TOEsj�%�B��q�)Հj {kKt����M&$�1�P1c��#��Kn_IIW����T��7b_��g<z!�jPG�6��P�A,-�R���x��C �+�W��e�fz�q�z�д;^����U��K��@�@�����OjiP[u�0�j��0�D��"�k����di�I=#"p_��F�P�����t���*?6S�n��EZ�vŇ���{xH� "����$���#��� ����<�8�< '�6�ɾ��ˈ���ὺqA�O\�m�����M��|�n�����*��L�ԩ�I.I�����pmaӲ��6?�3��D�t�u}\F�4V����#�6�1���q MwS)*��:0v�/]�P���k���~�;0�NfA����Ƶ�3Fwy�2��r��vD(�g+�je�m7�����a�w����BK>|Bm��DIF�.Z���L�G�9XN%w=�gm�X:z������Zf�Cf�v�;h�ToN^��~�9�nd/�Z��ࣇrcşn |�I��6���������8}�]��'/ �p��Sɨ�ca�q�j��/J���������3�Oe��I��|��dž^�Y�Q�Z!�ܯR$Bl��l�Q�Λoe%�1�����yAT4�������3���U��I�m @[��-�ijP��B�V_�5�P&!�J�T3�p�{��-�Ph+�{���k��-����n㋍�hM�����Kޯ�8��>\?��Ӊ�������C�����R#����͗?���(L� �=�c�â��QV����P����.��6j�Dx�m�U1�gJW~�,��٦Uћ[C�eQ#=������T��.���v�����-�o7#w�kQr��ˬE� .^15@����1���@�kG��ի�]-��8G&�=ZdE�DT�]M!���P}��/ސ����3�>��"��D�ɧK�o�|hH��BD��s�'�I&�h�#��Bt�U9�� �j���R��;���X±��7�����!�����8�����(�(oa�k��O����GD�w�4'X�؎���p?��5C�^�s9����Ω��,��@��0���N m��䈱j�j�����?�T�|�B[�� �-�����E!���X�䦽Nt�j���dQ����X�������-t���������� �y�p�oyY�,^;@�lim�ؐۇ��EE3�� $~^P���}��iˉ�� ^C��G�J�M���Z;�Ƶ����a�j�Jvch�vM&���q�F!w*_���'��1ݺD�S>^���3�m���W���4f�A�!{���Rg� U�����w����W6to��1�(�7���V'b��k96�U����8#д ���Ⱦ�9����}5������%ȏ��7��T7m��G�Z��iL�(B�o�B��GT�ԻxI �"�`����("�W2C ����dے:���ō�)YǠ�l$鷹���2� ���.�~�Q�ٹ�@0xMҔ�-�z��c���>T�����)3V���%G����O�)�{a9�~�k��M h���v�8�#G����$%�P��z��'@=x�7⣒�������%�\�Z֡�#���V�'ѭ��}&\~��`̰F��[�\<�l�ˤ���H]5j!�U�$�H�Gw� ��2J�1��R��'�X�����#h0�~PB��FI�a8"|� ���4;�gAM;�n�b�Wk??~��38�J��e��L�J�����'�]R��[U�1��ő�����D�#�� d�N�/��1��]�A��O�ۚM 4�f��"��:��6H��Lɢ�D�h�T��R��68�l3�u-A�]�̞������L��+n �G0Epz�5X/��0�z�Ϡ}���qY���-�Un��i\�=oBG�2y��������.��$t��+>�dpl�獰_C5�U���mҫ�ݯ��k3� ����c ���/x����Lu�m-�o�!h<�+�-ƈiI0 �� Kmő�|�<b��~�0�X�y��HI�V��}�5�V�=i��m7��ݚ��O�A�fi�=�I�\�1z��i�}�p+�j�E˙NW��=��A�G�l�Ȝ1����r����N�r��(�EؠW^�h�h��ӟrOĝα��Lj��oȻ�q���)��׀� _�%�����Np��v����-=QÕj��x�Ƥf��xj5#���D���>�� E�'q���I\]:f#Py�e*��J`S�B�7�e�^h@w�/;���̅bCT�A8���p4W`n��1k\@�����E���^gi����p�{�� �T�9ĕ��(��a������^�ԍ�ڃ���u&$zK �@ xtJ�������ixzh�S��Q��w�NfN��Uл��0�l��>����Tn�c���K�n��Sf �[�G�j�
Sections
.text Size: - Virtual size: 5.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.c93f0 Size: - Virtual size: 9.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.c93f1 Size: 10.5MB - Virtual size: 10.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ