D:\My Source\AbuserMTA-Injector\Release\AbuserMTA-Injector.pdb
Static task
static1
Behavioral task
behavioral1
Sample
Gaming Chair.exe
Resource
win7-20240903-en
General
-
Target
Gaming Chair.exe
-
Size
2.1MB
-
MD5
6b1ae040f09a43a4f0eee6fd964e2a47
-
SHA1
5d5ae0e6d89612fa55286f12f3a09443408ac1df
-
SHA256
d1163ec121ee6bdd11496c227b5f09a69cd2172aca93d111fac1be0cf73be0f2
-
SHA512
e6a7ad8d8245b7fa009b77c77e5d85059bcc6802247b72a5bf927a97390650d446f83984c43a3fd6cd5f5a35f747bda6b5d1e408aa59f212a856cc9eaca861a1
-
SSDEEP
49152:NMi7EDQljtuC9Ss8k9yi83GMB5rr3KJPjFJa9Ndcs8Mcs8Mcs8Mcs8M7Lbr7Lbr6:NBYDQ1th9SVk99scB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource Gaming Chair.exe
Files
-
Gaming Chair.exe.exe windows:6 windows x86 arch:x86
6b7988a683630b777528ba0ecd834ddc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetCurrentProcess
SetConsoleScreenBufferSize
GetStdHandle
GetConsoleCursorInfo
InitializeCriticalSectionEx
OpenProcess
CreateToolhelp32Snapshot
Sleep
GetLastError
SetConsoleCursorInfo
Process32Next
CloseHandle
DeleteCriticalSection
ExitProcess
SetConsoleTitleA
GetConsoleWindow
lstrcmpiA
WriteProcessMemory
LoadLibraryA
VirtualProtectEx
GetProcAddress
VirtualAllocEx
ReadProcessMemory
CreateRemoteThread
VirtualFreeEx
GetExitCodeProcess
IsDebuggerPresent
OutputDebugStringW
GetConsoleScreenBufferInfo
Process32First
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
GetModuleHandleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
user32
MoveWindow
GetWindowLongA
SetWindowLongA
SetWindowPos
SetLayeredWindowAttributes
advapi32
LookupPrivilegeValueA
OpenProcessToken
AdjustTokenPrivileges
msvcp140
?good@ios_base@std@@QBE_NXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
_Query_perf_frequency
?_Throw_Cpp_error@std@@YAXH@Z
?uncaught_exceptions@std@@YAHXZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
_Cnd_do_broadcast_at_thread_exit
_Query_perf_counter
_Thrd_detach
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Xlength_error@std@@YAXPBD@Z
vcruntime140
__CxxFrameHandler3
__std_terminate
__std_exception_copy
memset
_CxxThrowException
__current_exception
_except_handler4_common
__current_exception_context
__std_exception_destroy
memcpy
api-ms-win-crt-runtime-l1-1-0
system
_register_thread_local_exe_atexit_callback
__p___argv
terminate
_controlfp_s
_beginthreadex
_get_initial_narrow_environment
__p___argc
_set_app_type
_seh_filter_exe
_cexit
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_exit
exit
_initterm_e
_invalid_parameter_noinfo_noreturn
_c_exit
_initterm
api-ms-win-crt-heap-l1-1-0
_callnewh
malloc
free
_set_new_mode
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-stdio-l1-1-0
_set_fmode
__p__commode
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Sections
.text Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 944B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ