D:\work\mt\mon\utils\maintop_delete_obsolete_x86_setting\maintop_delete_obsolete_x86_setting.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ecbc07994b6f51cc5bd02e1362d7d98ef4cf14308a888bacf2a93f1431d97eca.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ecbc07994b6f51cc5bd02e1362d7d98ef4cf14308a888bacf2a93f1431d97eca.exe
Resource
win10v2004-20240802-en
General
-
Target
ecbc07994b6f51cc5bd02e1362d7d98ef4cf14308a888bacf2a93f1431d97eca
-
Size
42KB
-
MD5
b2059eac1f59d2316cf1ce4e80e0e52f
-
SHA1
73fb82db5769f16e133cf8460ac86d49190b3fb2
-
SHA256
ecbc07994b6f51cc5bd02e1362d7d98ef4cf14308a888bacf2a93f1431d97eca
-
SHA512
95c0ff2c7cb0aedde811908e9e5397da1f811482bb8d7e385900389518e2302e0cd39b63f83396a975c6c278dbf05387a5f31e717c7ae402f0bf27ca7145daf2
-
SSDEEP
768:Eihc+4VNQLQN5qa+P/adrJxgHFN2SQRRE7r:pcJ+3aBsGRRE7r
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ecbc07994b6f51cc5bd02e1362d7d98ef4cf14308a888bacf2a93f1431d97eca
Files
-
ecbc07994b6f51cc5bd02e1362d7d98ef4cf14308a888bacf2a93f1431d97eca.exe windows:5 windows x86 arch:x86
abbb5dd59f6d489e82430f56e84078ca
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetModuleFileNameA
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
Sleep
ExitProcess
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetStdHandle
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
RtlUnwind
LoadLibraryA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
HeapSize
WriteFile
SetUnhandledExceptionFilter
UnhandledExceptionFilter
HeapAlloc
HeapReAlloc
GetStartupInfoA
GetCommandLineA
HeapFree
GetCurrentProcessId
GetLastError
advapi32
RegEnumKeyExA
RegDeleteValueA
RegDeleteKeyA
RegQueryValueExA
RegSetValueExA
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegEnumValueA
shlwapi
SHDeleteKeyA
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE