c:\rail\lot\and\meat\name\For\port\villagestore.pdb
Static task
static1
Behavioral task
behavioral1
Sample
16cd1aa23a5c573ff9414942f835724ad6ab481b46d042be3f14faa2e11fdc56.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
16cd1aa23a5c573ff9414942f835724ad6ab481b46d042be3f14faa2e11fdc56.exe
Resource
win10v2004-20241007-en
General
-
Target
16cd1aa23a5c573ff9414942f835724ad6ab481b46d042be3f14faa2e11fdc56.exe
-
Size
81KB
-
MD5
91b3cc339d12ab75e109206b25a13cea
-
SHA1
1b24f1c7b935380c7965a47ac1ec6b0d5a855a39
-
SHA256
16cd1aa23a5c573ff9414942f835724ad6ab481b46d042be3f14faa2e11fdc56
-
SHA512
a4efc405e72ffb00094dece3c06d4b5585d937e1d52d28ca143de6f98493213a423675199b0603e6fb8e5dfe234e10580a8dd5f4312f3e1f60f07330b9a680b2
-
SSDEEP
1536:F1PvKv0h4NFTp8bqEKQJ2OdloVDfjnokT+lH0Ouds8RBXs7RDF61hoE:FhQ0hageExJfloR/+0jmyc7RD01hoE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 16cd1aa23a5c573ff9414942f835724ad6ab481b46d042be3f14faa2e11fdc56.exe
Files
-
16cd1aa23a5c573ff9414942f835724ad6ab481b46d042be3f14faa2e11fdc56.exe.exe windows:4 windows x86 arch:x86
0c7c7eb1ac4729e480cc1db17f22f7e0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
ole32
StgCreateDocfile
CoSuspendClassObjects
OleInitialize
CoUninitialize
OleCreate
CoInitialize
kernel32
InterlockedDecrement
CreateFileA
SetStdHandle
CreateDirectoryA
VirtualAlloc
CopyFileA
ResetEvent
VirtualProtect
VirtualFree
SetSystemTimeAdjustment
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
HeapDestroy
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
InitializeCriticalSection
RtlUnwind
LoadLibraryA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapReAlloc
GetConsoleCP
GetConsoleMode
FlushFileBuffers
HeapSize
MultiByteToWideChar
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
CloseHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetFilePointer
Sections
.text Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 349KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE