pdb.pdb
Static task
static1
Behavioral task
behavioral1
Sample
42869419adce98c64fd602a667386a44425d10f0b57ce25dd9481848fa43ad41N.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
42869419adce98c64fd602a667386a44425d10f0b57ce25dd9481848fa43ad41N.dll
Resource
win10v2004-20240802-en
General
-
Target
42869419adce98c64fd602a667386a44425d10f0b57ce25dd9481848fa43ad41N.exe
-
Size
94KB
-
MD5
ed14e78700ea3007fb857be3fc7ee5f0
-
SHA1
ceb14303a675145aea407479e4667caa95460d8f
-
SHA256
42869419adce98c64fd602a667386a44425d10f0b57ce25dd9481848fa43ad41
-
SHA512
bf45b7928c241612814443fa646d6980e9425d5c264e3ccf8621c65181f86712f804b102895493bfe6e4b5ad2e63d2d87ffdd7d1937d8c050a8dffdd8d23722d
-
SSDEEP
1536:mnQ/07T36xNjDg9h0c0SYmJhlrt7Um5KD1h5II:mnI07b6fUNxYOrt7U7C
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42869419adce98c64fd602a667386a44425d10f0b57ce25dd9481848fa43ad41N.exe
Files
-
42869419adce98c64fd602a667386a44425d10f0b57ce25dd9481848fa43ad41N.exe.dll windows:4 windows x86 arch:x86
0479c26ca6b4aaafa533fe4c4c8551c5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
Beep
OpenProcess
GetCurrentProcessId
lstrcmpA
MulDiv
LocalFree
Sleep
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
TerminateThread
WaitForSingleObject
CreateThread
CloseHandle
GetLocaleInfoA
LeaveCriticalSection
EnterCriticalSection
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
HeapAlloc
GetProcessHeap
HeapFree
ReadConsoleInputA
HeapValidate
msvcrt
memset
Exports
Exports
rpzqytmai
Sections
.text Size: 56KB - Virtual size: 53KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 486B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ