c:\x64_dbg\bin\x64\x64dbg_exe.pdb
Static task
static1
Behavioral task
behavioral1
Sample
c02fad049ff82af7535d43e16c4edaa2b6166e3a68b79208b8c391f95921d358.exe
Resource
win7-20240903-en
General
-
Target
c02fad049ff82af7535d43e16c4edaa2b6166e3a68b79208b8c391f95921d358
-
Size
740KB
-
MD5
0ea0cef4141192ef2abe6db28cf3dab3
-
SHA1
c484c34c11cc6848b4bd5c65a8810244c1fb32ca
-
SHA256
c02fad049ff82af7535d43e16c4edaa2b6166e3a68b79208b8c391f95921d358
-
SHA512
f838734e93315db606a37fc1f6a5a7d7f74f2cd2be79a039ed7e126dd4baeeeea9640d0b689604ca790354eda2dc99eeea14154bc1a52dc004129267fa5734d4
-
SSDEEP
12288:mXe9PnPVwXXc3ajG+hjQKymY8efKCpD7Gj9G6G1qT8nQkCu83L3Wl/np9DBDt3kw:yw3iXsqjnhMgeiCl7G0nehbGZpbD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c02fad049ff82af7535d43e16c4edaa2b6166e3a68b79208b8c391f95921d358
Files
-
c02fad049ff82af7535d43e16c4edaa2b6166e3a68b79208b8c391f95921d358.exe windows:5 windows x64 arch:x64
ad7da6b4239099fd624aac11565e6896
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
kernel32
GetProcAddress
GetCurrentProcess
GetCurrentProcessId
RaiseException
SetUnhandledExceptionFilter
GetCurrentThreadId
GetLastError
IsDebuggerPresent
CloseHandle
GetLocalTime
GetModuleHandleA
GetCurrentDirectoryW
CreateDirectoryW
CreateFileW
ExitProcess
SetLastError
GetFileSize
ReadFile
SetFilePointer
LoadLibraryW
GetModuleFileNameW
GetModuleHandleW
GetSystemDirectoryW
GetFileAttributesW
MultiByteToWideChar
FreeLibrary
LoadLibraryExA
EncodePointer
DecodePointer
IsProcessorFeaturePresent
SetConsoleCtrlHandler
RtlPcToFileHeader
RtlLookupFunctionEntry
RtlUnwindEx
GetCommandLineA
RtlCaptureContext
RtlVirtualUnwind
UnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetModuleHandleExW
WideCharToMultiByte
HeapAlloc
HeapFree
HeapSize
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetProcessHeap
GetStdHandle
GetFileType
GetModuleFileNameA
WriteFile
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
GetConsoleCP
GetConsoleMode
SetFilePointerEx
LoadLibraryExW
HeapReAlloc
GetStringTypeW
OutputDebugStringW
SetStdHandle
WriteConsoleW
FlushFileBuffers
Exports
Exports
LoadLibraryCheckedA
LoadLibraryCheckedW
Sections
.text Size: 83KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 568KB - Virtual size: 572KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE