C:\Users\удача\Desktop\StubClear\Release\BigProject.pdb
Static task
static1
Behavioral task
behavioral1
Sample
3870870eeada5b88839f57be689728109b51d60044881df0da7f9b9392e51873.exe
Resource
win7-20240705-en
General
-
Target
3870870eeada5b88839f57be689728109b51d60044881df0da7f9b9392e51873.exe
-
Size
845KB
-
MD5
b0ce25de19e62f77784bc90b6d90f8f2
-
SHA1
ac2588780757183b92e7c391247c64e3ee5a45ab
-
SHA256
3870870eeada5b88839f57be689728109b51d60044881df0da7f9b9392e51873
-
SHA512
736efbe43c9b5511f10dcff2751552eeaaaf8c87afde0b998416c676a7c0d6d23c0434dae7cc9e770143f662219a9c8573015a2264466a8c25da2827af2b1dd6
-
SSDEEP
12288:nMUCn+iSACmAedduV9mC9Xrm1BDMbCOwkEE/o2E0/gMHyK+N:PCn+iNZddq9mC97m1BDSWEPYM1y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3870870eeada5b88839f57be689728109b51d60044881df0da7f9b9392e51873.exe
Files
-
3870870eeada5b88839f57be689728109b51d60044881df0da7f9b9392e51873.exe.exe windows:6 windows x86 arch:x86
b87fc3874fae7c2c4ec39758e7ba8890
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
K32EnumProcessModulesEx
CreateFileW
K32EnumProcessModules
K32EnumProcesses
LoadLibraryA
GetProcAddress
FreeLibrary
OpenProcess
GetCurrentProcessId
GetCurrentProcess
CloseHandle
K32GetModuleBaseNameW
HeapSize
GetProcessHeap
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
HeapReAlloc
ReadConsoleW
SetFilePointerEx
GetFileSizeEx
ReadFile
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
GetFileType
HeapAlloc
HeapFree
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
LCMapStringEx
GetCPInfo
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GetModuleHandleW
TerminateProcess
RtlUnwind
GetLastError
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetStdHandle
WriteFile
GetModuleFileNameW
WriteConsoleW
comdlg32
CommDlgExtendedError
PrintDlgA
ChooseFontA
ReplaceTextW
ReplaceTextA
FindTextW
FindTextA
ChooseColorW
ChooseColorA
GetFileTitleW
GetFileTitleA
GetSaveFileNameW
GetSaveFileNameA
GetOpenFileNameW
GetOpenFileNameA
rpcrt4
UuidToStringW
RpcEpRegisterNoReplaceA
RpcMgmtWaitServerListen
RpcMgmtStopServerListening
UuidFromStringA
UuidToStringA
RpcBindingFree
RpcBindingFromStringBindingA
RpcBindingReset
RpcStringBindingComposeA
RpcStringFreeA
RpcStringFreeW
RpcServerListen
RpcServerRegisterIf
RpcServerUseProtseqEpA
UuidCreate
wintrust
WTHelperProvDataFromStateData
WTHelperGetProvCertFromChain
WTHelperGetProvSignerFromChain
version
GetFileVersionInfoW
VerQueryValueA
GetFileVersionInfoExW
GetFileVersionInfoSizeA
GetFileVersionInfoSizeW
GetFileVersionInfoA
GetFileVersionInfoSizeExW
VerQueryValueW
shlwapi
PathRemoveFileSpecA
PathAppendA
PathFileExistsA
PathFindFileNameA
PathIsURLA
PathAddBackslashA
Sections
.text Size: 389KB - Virtual size: 388KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 390KB - Virtual size: 399KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ