D:\Files\iNet\Code\zte-iaoc-inet-client\iNetClient-setup-project\iNetClient-update\x64\Debug\iNetClientUpdate.pdb
Static task
static1
Behavioral task
behavioral1
Sample
5349482ede9ad76934f6b23bfc5a6269f5c94e806d2d08e75a54ca9c106dd73f.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5349482ede9ad76934f6b23bfc5a6269f5c94e806d2d08e75a54ca9c106dd73f.exe
Resource
win10v2004-20240802-en
General
-
Target
5349482ede9ad76934f6b23bfc5a6269f5c94e806d2d08e75a54ca9c106dd73f
-
Size
1.7MB
-
MD5
db7d3b7cd64a2b5f31885fd8de9b6d03
-
SHA1
b79fe03e9ee30a7117f2d99fd72da9e94f858d22
-
SHA256
5349482ede9ad76934f6b23bfc5a6269f5c94e806d2d08e75a54ca9c106dd73f
-
SHA512
d378145714ecc2b3523554355c58b95cee825bd0bdb9b4317b27975804a0216d916a8b4a2f4d56729eed391a7caa6155496848cd0e16a53ca7e34cb054dbfc54
-
SSDEEP
24576:PSYjt2CTuKxk46u6GX9ylbTq/hui8tp/uvvyOkLtNk0v:PJj0KeHuxM8fK/u0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5349482ede9ad76934f6b23bfc5a6269f5c94e806d2d08e75a54ca9c106dd73f
Files
-
5349482ede9ad76934f6b23bfc5a6269f5c94e806d2d08e75a54ca9c106dd73f.exe windows:6 windows x64 arch:x64
13d150302af2ee064c4652bd2c0beef3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
zlib
inflate
inflateInit2_
crc32
inflateEnd
kernel32
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
GetEnvironmentVariableA
GetFileAttributesA
GetSystemTimeAsFileTime
GetCommandLineW
DecodePointer
RaiseException
GetLastError
SetLastError
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
InitializeCriticalSectionEx
DeleteCriticalSection
GetModuleFileNameW
WinExec
WideCharToMultiByte
CreateDirectoryW
CloseHandle
TerminateProcess
OpenProcess
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
CreateFileW
SetEndOfFile
SetFilePointer
WriteFile
CreatePipe
WaitForSingleObject
CreateProcessW
GetStartupInfoW
MultiByteToWideChar
GetFileAttributesExW
GetExitCodeProcess
WriteConsoleW
HeapQueryInformation
ReadConsoleW
SetFilePointerEx
GetFileSizeEx
GetConsoleMode
QueryPerformanceCounter
QueryPerformanceFrequency
WaitForSingleObjectEx
Sleep
GetCurrentThreadId
GetExitCodeThread
InitOnceBeginInitialize
InitOnceComplete
EnterCriticalSection
LeaveCriticalSection
EncodePointer
LCMapStringEx
RtlUnwind
GetModuleHandleW
GetProcAddress
GetLocaleInfoEx
GetStringTypeW
CompareStringEx
GetCPInfo
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
CreateEventW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetCurrentProcessId
InitializeSListHead
VirtualQuery
FreeLibrary
OutputDebugStringW
RtlPcToFileHeader
RtlUnwindEx
LoadLibraryExW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
HeapValidate
GetSystemInfo
GetModuleHandleExW
ReadFile
FindClose
FindFirstFileExW
FindNextFileW
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
CreateThread
ExitThread
FreeLibraryAndExitThread
ExitProcess
GetStdHandle
GetTimeZoneInformation
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetFileType
FlushFileBuffers
GetConsoleOutputCP
user32
MessageBoxW
shlwapi
PathFileExistsW
PathFileExistsA
PathIsDirectoryW
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 358KB - Virtual size: 357KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 93KB - Virtual size: 93KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.msvcjmc Size: 1024B - Virtual size: 669B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_RDATA Size: 512B - Virtual size: 244B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 488B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ