H:\rems\clNiwanw\ncqDjs.pdb
Static task
static1
Behavioral task
behavioral1
Sample
cc42c31afc5082d49cc6b44bf94cb2a0N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cc42c31afc5082d49cc6b44bf94cb2a0N.exe
Resource
win10v2004-20240802-en
General
-
Target
cc42c31afc5082d49cc6b44bf94cb2a0N.exe
-
Size
194KB
-
MD5
cc42c31afc5082d49cc6b44bf94cb2a0
-
SHA1
441945fd29b05ab18121cb7fa5d12444dca9a2de
-
SHA256
c21c04c1768e015d5be85b018278b97c3042512afbc33293f204b7c20de70a6d
-
SHA512
8e57434725572f26798675d241cde7dbc8468dbd709bc298ef0a2cd12cb56fdd2cab270d8a20201001652f10a1a9cc05cef0cb70865d69369b12f38825742c53
-
SSDEEP
3072:UCKAKWtdr4TC+GYdoYoFrvPpxmMSYr7QL/ASTvI9kx8eSDS8+ttcV6okH2CYA+7e:t+Wtdr4m+joYoNPpxlfaIPqtLz+7e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cc42c31afc5082d49cc6b44bf94cb2a0N.exe
Files
-
cc42c31afc5082d49cc6b44bf94cb2a0N.exe.exe windows:5 windows x86 arch:x86
31754ed1b80d6d226886f679c397fc89
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
comctl32
ImageList_ReplaceIcon
ImageList_Write
ImageList_AddMasked
CreatePropertySheetPageA
gdi32
GetTextExtentPoint32W
EndDoc
SelectObject
StartPage
ExcludeClipRect
Polyline
GetClipBox
PtVisible
comdlg32
PrintDlgExW
GetOpenFileNameA
GetOpenFileNameW
ChooseColorW
shlwapi
ChrCmpIW
PathRemoveArgsW
user32
MapVirtualKeyA
GetKeyState
RemoveMenu
CharUpperBuffW
LoadCursorA
GetFocus
GetCaretBlinkTime
MapVirtualKeyExA
GetWindowDC
VkKeyScanW
LoadIconW
GetForegroundWindow
ScrollWindow
kernel32
GetCommandLineW
RemoveDirectoryW
OpenMutexA
DeviceIoControl
OutputDebugStringA
lstrlenW
lstrcmpA
GetShortPathNameW
GlobalDeleteAtom
CompareFileTime
GetStringTypeExW
DefineDosDeviceW
ntdll
_vsnprintf
Exports
Exports
?noyuvjrobwJbDzgerypjM@@YGPAMPAD_N@Z
?cYyfEEdusSmqkYsdeUSfR@@YGXDD@Z
Sections
.itext Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 84KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ