C:\assemblage\Builds\8143168356444624774spylilarxb\snake-cpp-master\assemblage_outdir_bin\snake-cpp.pdb
Static task
static1
Behavioral task
behavioral1
Sample
0ad14571c6468fd5ef41afdeeeb390eab3544384ff1bbf81f3f0d242d25a2444.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
0ad14571c6468fd5ef41afdeeeb390eab3544384ff1bbf81f3f0d242d25a2444.exe
Resource
win10v2004-20240802-en
General
-
Target
0ad14571c6468fd5ef41afdeeeb390eab3544384ff1bbf81f3f0d242d25a2444
-
Size
57KB
-
MD5
4122ed814a3da1963b6585fb8708a250
-
SHA1
1cb1b5ffd2f16ea3eab13e112491e8b7297edab1
-
SHA256
0ad14571c6468fd5ef41afdeeeb390eab3544384ff1bbf81f3f0d242d25a2444
-
SHA512
75ab3102acab6683d1f2836942a3cbec5dba32ef065c0686a33481b6649261f2d6670b49c092afb0bcbd7e8994c3ccc7f089f378d3619759b91859f64dea6b87
-
SSDEEP
768:mXo2bp2JS7zx7wDhbubIXzkh3bMeN/i49R/D3:mX9p2JyFibubiU/N/i49RT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ad14571c6468fd5ef41afdeeeb390eab3544384ff1bbf81f3f0d242d25a2444
Files
-
0ad14571c6468fd5ef41afdeeeb390eab3544384ff1bbf81f3f0d242d25a2444.exe windows:6 windows x86 arch:x86
3acecedffcac6f2738dae23d07ce9908
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetStdHandle
GetConsoleScreenBufferInfo
WriteConsoleOutputW
Sleep
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentThreadId
GetModuleHandleW
user32
GetAsyncKeyState
MessageBoxW
msvcp140d
?_Xlength_error@std@@YAXPBD@Z
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
vcruntime140d
__std_type_info_destroy_list
memmove
__current_exception
_except_handler4_common
__std_exception_copy
__std_exception_destroy
_CxxThrowException
__CxxFrameHandler3
__current_exception_context
memcpy
memset
ucrtbased
_configure_narrow_argv
_initterm
_initterm_e
exit
_exit
_set_fmode
__p___argc
__setusermatherr
_cexit
_c_exit
_register_thread_local_exe_atexit_callback
_configthreadlocale
_set_new_mode
__p__commode
_free_dbg
_seh_filter_dll
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_crt_at_quick_exit
_controlfp_s
terminate
_set_app_type
_seh_filter_exe
malloc
_callnewh
_time64
srand
__stdio_common_vswprintf_s
_CrtDbgReport
_invalid_parameter
rand
_initialize_narrow_environment
__p___argv
_get_initial_narrow_environment
Sections
.textbss Size: - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.msvcjmc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.00cfg Size: 512B - Virtual size: 270B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ