HWRComp.pdb
Static task
static1
Behavioral task
behavioral1
Sample
80c1e03b2879ab0646f2683a87fd3879c26e2deed4dc368319eafa1401113545.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
80c1e03b2879ab0646f2683a87fd3879c26e2deed4dc368319eafa1401113545.exe
Resource
win10v2004-20240802-en
General
-
Target
80c1e03b2879ab0646f2683a87fd3879c26e2deed4dc368319eafa1401113545
-
Size
33KB
-
MD5
6e643182c5aba4a9f0222fe03f180654
-
SHA1
beae2691915a16b7dd761421af98ca7b74114dc0
-
SHA256
80c1e03b2879ab0646f2683a87fd3879c26e2deed4dc368319eafa1401113545
-
SHA512
a857d5d738ecd6b973f38013b9fb3902be4d55966640e4f73018cb80d8d8eaa7393fbdb521f4fc6981183a7d576f8e543b8fb44f631116af7278ee5dd3b63a1d
-
SSDEEP
768:pDD+Wnkbcdyh8l8qewWmOyDk7CLuL4ilJOf1iyPZv5:lD+V8u0WIDk7eQ49f15PD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 80c1e03b2879ab0646f2683a87fd3879c26e2deed4dc368319eafa1401113545
Files
-
80c1e03b2879ab0646f2683a87fd3879c26e2deed4dc368319eafa1401113545.exe windows:6 windows x86 arch:x86
f02249a6384661cd5b06a508ce870e29
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
ReadFile
GetFileSize
CreateFileW
WideCharToMultiByte
WriteFile
GetSystemDefaultLocaleName
CompareStringW
ReadConsoleW
GetStdHandle
WriteConsoleW
GetFileType
GetConsoleMode
CloseHandle
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
InterlockedCompareExchange
Sleep
InterlockedExchange
GetLastError
LocaleNameToLCID
FormatMessageW
LocalFree
msvcrt
_controlfp
_except_handler4_common
?terminate@@YAXXZ
__set_app_type
__p__fmode
__p__commode
__setusermatherr
_amsg_exit
_initterm
_XcptFilter
_exit
_cexit
__wgetmainargs
_wcsicmp
wcsrchr
memset
qsort
memmove
??_U@YAPAXI@Z
wcschr
iswcntrl
iswspace
??_V@YAXPAX@Z
exit
_vsnwprintf
free
malloc
_wcsnicmp
memmove_s
wcsstr
fgetws
fwprintf
_iob
fseek
printf
bsearch
_wtoi
qsort_s
memcpy
calloc
realloc
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE