D:\TT2\RunGate.pdb
Static task
static1
Behavioral task
behavioral1
Sample
64503a7bf72d524cc8a4f7ce273a0886757508d8c5527eb95af2763193e255d6.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
64503a7bf72d524cc8a4f7ce273a0886757508d8c5527eb95af2763193e255d6.exe
Resource
win10v2004-20240802-en
General
-
Target
64503a7bf72d524cc8a4f7ce273a0886757508d8c5527eb95af2763193e255d6
-
Size
1.4MB
-
MD5
cdbd13d47311de48dda63f828a32d156
-
SHA1
e1c8aaf2cec2998cace52460fb9f0e4cf45ea780
-
SHA256
64503a7bf72d524cc8a4f7ce273a0886757508d8c5527eb95af2763193e255d6
-
SHA512
af28273f63b9c76fb1032d42909527731a5819180ca5e29af326d94dcb99f50f048397e4b9faee732f55d2b64785f499194ed9a6235a2a78d140421e386a07c3
-
SSDEEP
24576:LfXgZI+kBQws7tSaQvrTQMBYX8zTPWvaokG0qXUEAdeuDfRYhJQe6pwdcM:LwI+3ws7AaQv/pPUnka2LRKJQendcM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64503a7bf72d524cc8a4f7ce273a0886757508d8c5527eb95af2763193e255d6
Files
-
64503a7bf72d524cc8a4f7ce273a0886757508d8c5527eb95af2763193e255d6.exe windows:5 windows x86 arch:x86
790c0820c0bf699fde7f45de8ca5ed96
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
psapi
GetProcessMemoryInfo
kernel32
GetVersionExA
ResumeThread
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
DestroyWindow
gdi32
CreateFontIndirectA
comdlg32
GetFileTitleA
advapi32
RegDeleteKeyA
shell32
DragFinish
ole32
CoUninitialize
oleaut32
VarUI4FromStr
comctl32
InitCommonControlsEx
ws2_32
htonl
wininet
InternetOpenA
iphlpapi
GetExtendedTcpTable
Exports
Exports
���zj�y��P���:��3I��D��[+�wI_�����sD"s������(]���J�̃�3Pr�ΧG��tN�ҰG�ӉؖH�a����Y2�������c!շ0*�� kL���~Gz~�����=�`'�N���?�d��A��.m���/��!�ꦡ�ro�=1�zw�07Y���P�ά �;�;xU �dI�\���T�4BY&T�N�.O��ƨ�=b!G����j�tv���KҠw�[u1l����ډ�h��: �Ol�a���Ӳ7��ϻ[���)X��i�RD�^��g��� ��I@r1Ɉ)���R&�����Z�b��n?q�~��?gǐX7\���V�WU�=k�yO��{r8L8`?wܺ�vX�fm�t��m�}��X��2��kD�EX���ظ���������m��֠�ƹ@!o~���Dľ@���"v^/^k�yw��:��:��K�>D#���|� ��m���WԞ:��^��Y�&zx�Hr{�+��Z��o����zi��D 0�I�^s���9�hM�2���$bV��aUW��s썧r�G��vw�>�v ������Jq�ǔ��%��M^n>����W�1��=}��ì�ˡk4���~������}����ϊ���f�4I�D;�B����tN���o�&%��ڰ��6�H��6d����I��3���kU|G�5�N��|H5���j�XQ���u6���r�5�Q|�����\ ��3nN���c NU�VKw��`�����Cb�@���I3�����Pz���2�y�FD�<!�����\�O���R-G��p%����^!̳�Vc�mQ%?���&�5�؏x�o�p�pl�tE��T(� �2��B�(#+I���qE �;�������C#����UatE��I��t_�����|��ݙ��P��D���ɒ�@mq�H�\���g4!>뱅W�`��>��S����\xUQ��`˸�=]cȡ�p���ӿsO����%��I ��l��J�n%i)�S�="������_T��� ���fmZ�Q��|�l|��^�3�l`ќ��!mw��~�]��7עY`h2�����N'\2�۾���8`�v�._=�MBg�AOp��`��M�0���!�;: 2 Kj�]��CL�%k<�i�s^.½ݯ7י��� �/�����[�7T��q&m�MQ�KP�&� �а��J� �!7=��� ط��}U�G�A��4�y�-�!N����m�E����r�t_��SgV:�Ս$$يkh�,J�__G�<0�U�o����a�)j�:�[Pc/36���}!_�U�n�)�͟�n_�u���A\G/�Ǿ��g������P��#ƨ)(�n��y�x[l���I_�c�r��'q��W���?��9Q_�q�'�A~� >���q.8��#��Z; 8caw��5�4B(:.S1�Ϝ*��cZp��g8��9M���(�"[�u�g�Ǔ:�.HVr�1F0�6�������j��f����̶��6��ldU1&�?ľ����B�"�_�٩��>m�n�*����KS�SoI-%�#��HO��$�Z�}��LҖV��*�$c3H\G������1Xlc�Q$�Ԭbͤ���m�v�:���Z=���F�(r+E�,��*NƲJ1h������ �S�/Gra���� ?h�F.�8��ni.�Jћ�Γ5$�$���W�\�U�lÓ�N�v��<w1�^ �<�\l�O��w��E�҄���嬑#9']�� e����xk�z%�E�ۉ� \��U�M�I� ;]zQe~״>��# y(BPm�f������K��K�`�H���_�.jȽ��o%v�0ߩ@/[ޞ7qt-�|��lo6HN*ؖ�JC�OX(��U*u�*�Ţ�-��w�xÏ2����ٹ˳:�\Ƶ��ô+Pz>�`��u��l հ2��GW�j���*�6D�߀���O�%u��E#�Y���n������+N�R��g$�P�+9nפ�p�qx=Dz.��{A,w^Ȯ�9�[v7LH4�2�����Y��d���f2��}�C"��9�>wZv3%�0P_R�g,y���ߗ�����hV����R����r�!lB��$/Dl���[�����cƃd�i���iS�4J=�(�%X��HZ��4���[������ ��|0ƻ�������}�"t��8���4��U��ljg`H�W�n�ކ��RLK���,o~j��uq +�f��C���ӎ4^ť�ԍ}it[�_��"P�>2v�\H��҄�_k��f�R�,B���bE���~�5r߈(%c��Xd)ph4��f;:��o�fV���[/�!��Sp^�� U�$��x�|������9�J[^�P�n�/��y(Y�/LB>P���Tc��+$E���ދ��K�G@�ɨ��-cIy^� �=1oc�+��4 ��8��h0��-�L�zt}F��X:���Ӓ�f�"g ���E�Z9S�O���fԙT�?\������F�����'�R��Z�T/��[�َ}���+}�d��Y��;��t���$��n�jr��Z�I�>wu��O5g�����TS�����&�����p�9��C� 5D-�T�4��o�˳�F��X�w�Gǧ9Q�DH�,��Ix�c(�]�RP#s`qj�����|C��jY ����H�h�A=CR���,�*���M���Z��r��y]$�~��bG`���:w/��e(&�_�u�8��@�Z����7�H��KC�ˁφ��=����Gr��S�+�v��axC�� d�s����ܛ�`����´e������4hE�\��:�%�����Hq<���������>!+sSw*�iy��)�||��Ng��#��j�4חD��4�������"x?x�����N_y�^M`E��1L���H�w��|�V9W���B<wL�:Y�7��J�sηVʲ�٣8��1A�m�eu���J+�կ,�a�k����gW�+��?�)Z�z���Z����[������/�w�<[����D�1��9roj�S�m�iv#�T2VKf?��!$����9Ms�&p�:��b/�8��VF�F
Sections
.text Size: - Virtual size: 631KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 129KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: - Virtual size: 348B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.beta0 Size: - Virtual size: 893KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.beta1 Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ