D:\PMS\pms4\Project(20130920)\GolfProject\bin\GolfProject.pdb
Static task
static1
Behavioral task
behavioral1
Sample
Trojan.Autorun.ATA_virussign.com_b581b6aa9a87efa3716610e2b2250cbe.exe
Resource
win7-20240903-en
General
-
Target
Trojan.Autorun.ATA_virussign.com_b581b6aa9a87efa3716610e2b2250cbe.exe
-
Size
328KB
-
MD5
b581b6aa9a87efa3716610e2b2250cbe
-
SHA1
c46fac32a698ca5e9a7732ed9dc3092c3523006c
-
SHA256
eb7bd36bbbec2999bf59663f3f70ffa0397b2d37b1ab00390d4663950b4606be
-
SHA512
1db8b0379099f9bcc154fbe57e9f587fabb997ddd9456c7a088273022415842908831372a3198532188c193f56a50e80f9b6f76b7ef4f0258f0733509a0558ae
-
SSDEEP
6144:Wbp4JXa3vgPHQvEhZmvCrycKgBtyhXn/R3fo8CX/Jv:2p4ivgPH5fmvgMX/JAR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Trojan.Autorun.ATA_virussign.com_b581b6aa9a87efa3716610e2b2250cbe.exe
Files
-
Trojan.Autorun.ATA_virussign.com_b581b6aa9a87efa3716610e2b2250cbe.exe.exe windows:5 windows x86 arch:x86
aac73941c87ad61412ca8ad4d2283df3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
DestroyMenu
advapi32
RegQueryValueExW
shell32
ShellExecuteW
ws2_32
gethostbyaddr
iphlpapi
GetAdaptersInfo
oleacc
LresultFromObject
gdi32
DeleteDC
winspool.drv
OpenPrinterW
oleaut32
VariantClear
Sections
.text Size: 296KB - Virtual size: 500KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE