U:\ponp\YIDtfAm\GjcAmj.pdb
Static task
static1
Behavioral task
behavioral1
Sample
5c7746b10fb3c2488f44ffb12e459816872039c4e8a16ed2934c9a6256302c91N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5c7746b10fb3c2488f44ffb12e459816872039c4e8a16ed2934c9a6256302c91N.exe
Resource
win10v2004-20240802-en
General
-
Target
5c7746b10fb3c2488f44ffb12e459816872039c4e8a16ed2934c9a6256302c91N
-
Size
142KB
-
MD5
e6d24b99fbbe63e986c2b38edd8c6640
-
SHA1
1e04f4397a3a2bbf181399c888cf706efdb0119c
-
SHA256
5c7746b10fb3c2488f44ffb12e459816872039c4e8a16ed2934c9a6256302c91
-
SHA512
a5fe22bb280dcfeb7aa5b699a34469facce595915949e568a25f880ac783cdf558510c455f2654be42d97c1db8d75cfa07770827bab74d0ab8e6693abdcf325e
-
SSDEEP
3072:K/7qvk1qs8OPcmSkHWy1KQeF9i2wr23dee42cPfuN:i7Ck1qsTSk2y1K72qQZU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5c7746b10fb3c2488f44ffb12e459816872039c4e8a16ed2934c9a6256302c91N
Files
-
5c7746b10fb3c2488f44ffb12e459816872039c4e8a16ed2934c9a6256302c91N.exe windows:5 windows x86 arch:x86
fa02b437b7575cf0a82ebd8662de6c62
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
shlwapi
StrCatBuffW
gdi32
CreateFontIndirectW
Polygon
GetStockObject
StretchBlt
OffsetRgn
CreateEllipticRgnIndirect
EndPage
kernel32
CompareStringW
MulDiv
MapViewOfFile
LoadLibraryW
WaitForMultipleObjectsEx
GetTempPathA
TlsGetValue
LocalReAlloc
lstrlenW
GetVersion
CreateFileMappingW
ConvertDefaultLocale
user32
GetPropW
SendMessageTimeoutA
AttachThreadInput
MessageBoxExW
HideCaret
AppendMenuW
wsprintfW
MessageBoxA
GetMenuDefaultItem
SetScrollPos
SystemParametersInfoA
RemovePropW
GetClientRect
DeleteMenu
CharUpperBuffA
Exports
Exports
?zKinhzujigerNljz@@YGXPAJI@Z
?cngUPCqxYG@@YGPAJPAG@Z
?mlevxMkuarxvBsJcfsyYH@@YGJPAI@Z
?bvIokiXDgdtkVnlluaP@@YGKE@Z
Sections
.text Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 920B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 153KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ