rebase.pdb
Static task
static1
Behavioral task
behavioral1
Sample
1d2720bfc5307fdacf85f10af4902a50N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
1d2720bfc5307fdacf85f10af4902a50N.exe
Resource
win10v2004-20240802-en
General
-
Target
1d2720bfc5307fdacf85f10af4902a50N.exe
-
Size
120KB
-
MD5
1d2720bfc5307fdacf85f10af4902a50
-
SHA1
2c9f09aa4f2efdaa797038f276505e7e67adc9ab
-
SHA256
d4d12b723477e50dd745f9a78055fa4d367d3a79b1e54eedf63b4ccd0a0a833d
-
SHA512
d263987b6e3e8434b5d5dc99f2a0f1295282db401c4d305bd10dc0de0bb7e5de100a08a61c8f31bb61c28299ba3490668c1dd256b6a05874bff4fa2ac006fb2f
-
SSDEEP
3072:vlBLYKAOaXxWQkZBUkmDH9aQ9ukTqALSv1q:HzbaXEBOk4MMuqqzvE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1d2720bfc5307fdacf85f10af4902a50N.exe
Files
-
1d2720bfc5307fdacf85f10af4902a50N.exe.exe windows:6 windows x86 arch:x86
070f3352a4282c92041480a960c4ed04
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
CloseHandle
CreateFileMappingA
SetEndOfFile
SetFilePointer
FlushViewOfFile
GetLastError
GetFileSize
SearchPathA
CreateFileA
FreeLibrary
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetSystemInfo
MapViewOfFile
IsDBCSLeadByte
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
RtlUnwind
OutputDebugStringA
InterlockedCompareExchange
Sleep
InterlockedExchange
UnmapViewOfFile
SetLastError
GetFullPathNameA
ExitProcess
msvcrt
isxdigit
localeconv
realloc
__badioinfo
__pioinfo
_read
_fileno
isleadbyte
__mb_cur_max
mbtowc
isspace
isdigit
_onexit
_lock
__dllonexit
_unlock
_controlfp
?terminate@@YAXXZ
_ismbblead
_mbsdec
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_amsg_exit
_initterm
_XcptFilter
_exit
_cexit
__getmainargs
_tzset
toupper
fopen
_errno
_strdup
fclose
_strlwr
time
strrchr
memmove
calloc
malloc
free
memcpy
memset
fseek
fscanf
_stricmp
fprintf
_iob
fputs
exit
??_V@YAXPAX@Z
imagehlp
ReBaseImage64
FindDebugInfoFile
ImageDirectoryEntryToData
CheckSumMappedFile
Sections
.text Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1016B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 78KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE