C:\vmagent_new\bin\joblist\829559\out\Release\360Safe.pdb
Static task
static1
Behavioral task
behavioral1
Sample
8ef385574097368662877d3e4b699137d4763272e6f476414e9ef44469d25965N.exe
Resource
win7-20241010-en
General
-
Target
8ef385574097368662877d3e4b699137d4763272e6f476414e9ef44469d25965N
-
Size
1.3MB
-
MD5
a4e2bdd577861adf1a42d068ffb9d8f0
-
SHA1
0ba91d92b7fffdadcc49782fde1813ce3d5b6695
-
SHA256
8ef385574097368662877d3e4b699137d4763272e6f476414e9ef44469d25965
-
SHA512
3664d2663af597097af36cc334fdcaf2b8fce9f7de34f99747770bb13c430c33d8d1a4c8c494589f6f26c855ce5975d07d60f7a761cad57871e64f5cd5d4c308
-
SSDEEP
24576:7TYjkCmsr6xD0VwA5lobrasS56Wrp0lp3C39yPyzmxB6c:f9oVdlobrasn3CNyDB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8ef385574097368662877d3e4b699137d4763272e6f476414e9ef44469d25965N
Files
-
8ef385574097368662877d3e4b699137d4763272e6f476414e9ef44469d25965N.exe windows:5 windows x86 arch:x86
9ca4a897801e7946902ca25223866dcd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
CreateProcessW
SetFilePointer
FileTimeToSystemTime
FileTimeToLocalFileTime
InterlockedExchange
GetStartupInfoW
GlobalUnlock
GlobalLock
GlobalAlloc
lstrlenA
GlobalDeleteAtom
GlobalFindAtomW
GetLocalTime
CreateEventW
SetUnhandledExceptionFilter
WriteFile
GetSystemWindowsDirectoryW
FreeResource
GetTempPathW
GlobalFree
ResetEvent
SetEvent
GetLongPathNameW
GlobalAddAtomW
GetFileSizeEx
GetProcessTimes
SystemTimeToFileTime
WaitForMultipleObjects
GetTempFileNameW
CopyFileW
SetEndOfFile
OutputDebugStringW
OpenProcess
TerminateProcess
CreateToolhelp32Snapshot
Process32FirstW
SetEnvironmentVariableA
CompareStringW
CompareStringA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
GetLocaleInfoW
GetConsoleMode
GetConsoleCP
GetEnvironmentStringsW
Process32NextW
GetStartupInfoA
GetPrivateProfileIntW
GetFileType
SetStdHandle
GetStringTypeA
lstrcmpiW
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
InitializeCriticalSectionAndSpinCount
GetTimeZoneInformation
GetModuleFileNameA
GetStdHandle
HeapCreate
IsValidCodePage
GetOEMCP
GetACP
GetStringTypeW
GetCPInfo
LCMapStringW
LCMapStringA
CreateThread
ExitThread
ExitProcess
IsDebuggerPresent
UnhandledExceptionFilter
GetExitCodeProcess
QueryPerformanceFrequency
QueryPerformanceCounter
TlsFree
TlsAlloc
HeapWalk
HeapLock
OpenThread
HeapUnlock
TlsSetValue
TlsGetValue
SetFilePointerEx
LocalFileTimeToFileTime
GetSystemTimeAsFileTime
CreateFileA
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
FlushInstructionCache
GetCommandLineW
SetHandleCount
LoadLibraryExW
GetCurrentProcessId
CreateMutexW
ReleaseMutex
InterlockedDecrement
ProcessIdToSessionId
LoadLibraryA
GetVersionExW
InterlockedIncrement
SetEnvironmentVariableW
GetCurrentThreadId
IsWow64Process
VirtualProtect
GetModuleHandleA
MultiByteToWideChar
SetLastError
ExpandEnvironmentStringsW
GetVersion
GetTickCount
IsValidLocale
GetSystemDirectoryW
GetModuleHandleW
GetWindowsDirectoryW
LoadLibraryW
InterlockedCompareExchange
Sleep
GetCurrentProcess
CreateRemoteThread
WaitForSingleObject
GetPrivateProfileStringW
lstrlenW
GetModuleFileNameW
WideCharToMultiByte
UnmapViewOfFile
GetFileSize
CreateFileMappingW
MapViewOfFileEx
ReadFile
GetLastError
DeleteCriticalSection
InitializeCriticalSection
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
CreateFileW
DeviceIoControl
CloseHandle
DeleteFileW
EnterCriticalSection
LeaveCriticalSection
GetProcAddress
FreeLibrary
FreeEnvironmentStringsW
RaiseException
user32
UnregisterClassA
SendMessageTimeoutW
IsWindow
MessageBoxW
GetActiveWindow
DispatchMessageW
TranslateMessage
GetMessageW
PeekMessageW
CharNextW
DefWindowProcW
SetWindowLongW
GetClassInfoExW
LoadCursorW
ReleaseDC
GetDC
CreateWindowExW
RegisterClassExW
WaitForInputIdle
SendMessageW
CopyRect
SetRectEmpty
EndDialog
DestroyWindow
GetWindowLongW
SetWindowPos
MapWindowPoints
GetClientRect
GetMonitorInfoW
MonitorFromWindow
GetWindowRect
GetWindow
GetParent
MoveWindow
ShowWindow
IsWindowVisible
SetTimer
KillTimer
PtInRect
OffsetRect
GetCursorPos
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
CallWindowProcW
ClientToScreen
FindWindowExW
RegisterClassW
GetClassInfoW
SetWindowTextW
RedrawWindow
IsWindowEnabled
RegisterWindowMessageW
PostQuitMessage
CreateDialogParamW
LoadImageW
GetSystemMetrics
SetLayeredWindowAttributes
ReplyMessage
PostMessageW
FindWindowW
AllowSetForegroundWindow
GetWindowThreadProcessId
DisableProcessWindowsGhosting
SetRect
InflateRect
SubtractRect
EnableWindow
GetDesktopWindow
ScreenToClient
DialogBoxParamW
GetCursorInfo
GetAsyncKeyState
BeginPaint
EndPaint
InvalidateRect
IsCharAlphaNumericW
SetCursor
SetActiveWindow
BringWindowToTop
IsIconic
SetForegroundWindow
gdi32
SetDIBColorTable
SetBkMode
SetStretchBltMode
BitBlt
DeleteObject
CreateCompatibleBitmap
SetViewportOrgEx
CreateCompatibleDC
SelectObject
DeleteDC
GetTextExtentPoint32W
CreateDIBSection
advapi32
CryptGenRandom
CryptReleaseContext
CryptAcquireContextW
StartServiceW
ChangeServiceConfigW
ControlService
OpenSCManagerW
OpenServiceW
CloseServiceHandle
QueryServiceStatus
AllocateAndInitializeSid
EqualSid
FreeSid
SaferCreateLevel
SaferComputeTokenFromLevel
SaferCloseLevel
RegOpenKeyW
RegQueryInfoKeyW
RegDeleteValueW
RegDeleteKeyW
RegCloseKey
RegEnumKeyExW
OpenProcessToken
CreateProcessAsUserW
GetTokenInformation
RegCreateKeyA
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegQueryValueExW
RegQueryValueExA
shell32
ShellExecuteW
SHCreateDirectoryExW
SHAppBarMessage
ord165
ShellExecuteExW
SHChangeNotify
SHGetSpecialFolderPathW
SHGetFolderPathW
ole32
CreateStreamOnHGlobal
CoCreateGuid
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CoInitialize
CoCreateInstance
CoUninitialize
oleaut32
SysStringLen
SafeArrayRedim
SafeArrayDestroy
SafeArrayCreate
VariantCopy
SafeArrayUnlock
SafeArrayLock
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayCopy
SafeArrayGetVartype
SysAllocString
SysFreeString
VariantInit
VariantClear
VarUI4FromStr
VariantTimeToSystemTime
SystemTimeToVariantTime
SysAllocStringLen
DispCallFunc
SysAllocStringByteLen
shlwapi
StrCmpIW
SHDeleteKeyW
SHSetValueW
PathCombineW
PathAddBackslashW
StrCmpNIW
StrStrIW
PathIsRelativeW
StrStrIA
SHDeleteValueW
PathIsDirectoryW
PathFindExtensionW
PathFindFileNameW
PathFindFileNameA
SHSetValueA
SHGetValueA
SHGetValueW
PathAppendW
PathRemoveFileSpecW
PathFileExistsW
comctl32
InitCommonControlsEx
_TrackMouseEvent
msimg32
AlphaBlend
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
gdiplus
GdipSetImageAttributesColorMatrix
GdipDisposeImageAttributes
GdipDrawImageRectRect
GdipGetImageHeight
GdipGetImageWidth
GdipCreateImageAttributes
GdipAlloc
GdipCreateHBITMAPFromBitmap
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipBitmapSetResolution
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromFile
GdipSetPropertyItem
GdipGetAllPropertyItems
GdipGetPropertySize
GdipImageSelectActiveFrame
GdipImageGetFrameCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameDimensionsCount
GdipFree
GdipGetImagePixelFormat
GdipGetImageRawFormat
GdipGetImageFlags
GdipGetImageVerticalResolution
GdipGetImageHorizontalResolution
GdipSaveImageToFile
GdiplusShutdown
GdiplusStartup
GdipCreateBitmapFromStream
GdipDeleteCachedBitmap
GdipCreateCachedBitmap
GdipRestoreGraphics
GdipSaveGraphics
GdipDrawImageI
GdipCloneImage
GdipCloneBrush
GdipDrawImageRectI
GdipFillRectangleI
GdipSetSmoothingMode
GdipGetImageGraphicsContext
GdipCreateFromHDC
GdipCreateSolidFill
GdipCreateBitmapFromScan0
GdipDisposeImage
GdipDeleteGraphics
GdipDeleteBrush
GdipSetImagePalette
userenv
ExpandEnvironmentStringsForUserW
ntdll
RtlUnwind
ZwQuerySystemInformation
ZwQueryVirtualMemory
ZwFreeVirtualMemory
RtlReAllocateHeap
RtlAllocateHeap
NtDelayExecution
ZwProtectVirtualMemory
ZwAllocateVirtualMemory
RtlCreateHeap
crypt32
CryptBinaryToStringA
CryptStringToBinaryA
psapi
GetModuleFileNameExW
iphlpapi
GetAdaptersInfo
GetIpAddrTable
NotifyAddrChange
ws2_32
WSACreateEvent
ntohl
WSACloseEvent
inet_addr
htons
WSAResetEvent
ntohs
htonl
Sections
.text Size: 906KB - Virtual size: 905KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 155KB - Virtual size: 155KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 40KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 62KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 125KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE