netstat.pdb
Static task
static1
Behavioral task
behavioral1
Sample
65ae2c4a2d5b48d7ab4ce4413728c6d0N.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
65ae2c4a2d5b48d7ab4ce4413728c6d0N.exe
Resource
win10v2004-20240802-en
General
-
Target
65ae2c4a2d5b48d7ab4ce4413728c6d0N.exe
-
Size
63KB
-
MD5
65ae2c4a2d5b48d7ab4ce4413728c6d0
-
SHA1
37c9a4d36274c20693bdba0995d5c2a6c5f0ac9b
-
SHA256
b3fb143a010e51670c9d3b38861de3bca2a58ab384522ab4eeb006c31a8398af
-
SHA512
75501e95e7dd84b542b8a27314a360bb143ef4aa08663aabddaf5b8ef332a25e9927ad80ba8220d80ce5113b148925600dc5ce21a6f8f0b036c8a6891fa7e8aa
-
SSDEEP
768:AOG79kqvghNFIBpsuK/4TDCutxdxCUcwytvWmBAOs31WopoUKYukFuWqc1Jk:AO0vjRlCA2ssTs31WoprVfu5c1Jk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65ae2c4a2d5b48d7ab4ce4413728c6d0N.exe
Files
-
65ae2c4a2d5b48d7ab4ce4413728c6d0N.exe.exe windows:5 windows x86 arch:x86
9b2e0e6048c9be88c7fb33585f4e1f8a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
msvcrt
_iob
exit
toupper
sscanf
_strupr
_c_exit
_exit
_XcptFilter
_cexit
__initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
sprintf
_except_handler3
_controlfp
time
fprintf
strchr
_setmode
system
advapi32
LookupPrivilegeValueA
AdjustTokenPrivileges
OpenProcessToken
kernel32
GetModuleHandleA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CloseHandle
LoadLibraryA
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
LoadLibraryExA
Sleep
FreeLibrary
HeapFree
GetProcessHeap
OpenProcess
lstrcmpiA
GetProcAddress
GetCurrentProcess
GetSystemTimeAsFileTime
TerminateProcess
GetLastError
GetSystemDirectoryA
LocalFree
FormatMessageA
dbghelp
SymInitialize
SymSetSearchPath
SymLoadModuleEx
SymGetModuleInfo64
SymCleanup
psapi
EnumProcessModules
GetModuleInformation
GetModuleBaseNameA
GetModuleFileNameExA
iphlpapi
AllocateAndGetTcpExTableFromStack
AllocateAndGetUdpExTableFromStack
GetIcmpStatsFromStackEx
GetUdpStatsFromStackEx
AllocateAndGetUdpExTable2FromStack
GetIpStatsFromStackEx
AllocateAndGetTcpExTable2FromStack
GetTcpStatsFromStackEx
user32
CharToOemBuffA
ws2_32
htons
getnameinfo
gethostname
ntohl
ntohs
WSAStartup
ntdll
RtlAllocateHeap
RtlFreeHeap
NtQuerySystemInformation
snmpapi
SnmpUtilVarBindFree
SnmpUtilMemFree
SnmpUtilMemAlloc
SnmpUtilOidCpy
Sections
.text Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 41KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE