C:\Users\Vinay\Projects\simple_launcher\dist\w64.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ae1cecdd9f69f196695df375e10b6a77cb259861c4cc41063bab1065f89dba25.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
ae1cecdd9f69f196695df375e10b6a77cb259861c4cc41063bab1065f89dba25.exe
Resource
win10v2004-20240802-en
General
-
Target
ae1cecdd9f69f196695df375e10b6a77cb259861c4cc41063bab1065f89dba25
-
Size
1.3MB
-
MD5
a21c4be12004e5aad493ee29f88f71b4
-
SHA1
aed64eaab04312940a81d006d912318324c345ce
-
SHA256
ae1cecdd9f69f196695df375e10b6a77cb259861c4cc41063bab1065f89dba25
-
SHA512
d7ca30c64a64a1042ba0ff487e5fc3ab1898bd443c47dfbb4c947d074e6a2573c3519601a8d1e6ee8aea498399180ce1e726dd15f09c8038d233b588c53f3160
-
SSDEEP
12288:3anVIURitiwqweCqjKVGQqL3LQTTldgcOh/ay71zjyJVygBHrGroI:Kdn7wajKVK3QtdgcOx371fylxrGr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ae1cecdd9f69f196695df375e10b6a77cb259861c4cc41063bab1065f89dba25
Files
-
ae1cecdd9f69f196695df375e10b6a77cb259861c4cc41063bab1065f89dba25.exe windows:5 windows x64 arch:x64
ad2258898f0fbdcaaa6098836dd9129f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
kernel32
ExitProcess
GetCommandLineW
SearchPathW
SetInformationJobObject
FreeLibrary
CreateProcessW
SetHandleInformation
WaitForSingleObjectEx
AssignProcessToJobObject
FormatMessageW
GetExitCodeProcess
GetModuleFileNameW
QueryInformationJobObject
MultiByteToWideChar
GetStartupInfoW
GetTempPathW
CreateJobObjectA
GetStdHandle
GetLastError
GetProcAddress
SetStdHandle
LoadLibraryA
GetFileType
SetConsoleCtrlHandler
SetCurrentDirectoryW
CloseHandle
GetProcessHeap
SetEndOfFile
SetEnvironmentVariableW
CompareStringW
FlushFileBuffers
GetConsoleMode
GetConsoleCP
HeapReAlloc
GetModuleHandleW
DecodePointer
HeapFree
HeapAlloc
EnterCriticalSection
LeaveCriticalSection
GetStringTypeW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
EncodePointer
TerminateProcess
GetCurrentProcess
InitializeCriticalSectionAndSpinCount
GetCommandLineA
RtlUnwindEx
DeleteCriticalSection
LoadLibraryW
FlsGetValue
FlsSetValue
FlsFree
SetLastError
GetCurrentThreadId
FlsAlloc
WriteFile
HeapSetInformation
GetVersion
HeapCreate
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetHandleCount
Sleep
LCMapStringW
ReadFile
SetFilePointer
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetModuleFileNameA
WideCharToMultiByte
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
CreateFileW
HeapSize
WriteConsoleW
user32
PostMessageW
WaitForInputIdle
PeekMessageW
CreateWindowExW
GetMessageW
DestroyWindow
shlwapi
PathCombineW
StrStrIW
PathRemoveFileSpecW
Sections
.text Size: 54KB - Virtual size: 53KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1.2MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE