c:\rail\lot\and\meat\name\For\port\villagestore.pdb
Static task
static1
Behavioral task
behavioral1
Sample
69805d5745bc61670a308f34c71c3f0810d795350bc574e9b56840cad1326cbcN.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
69805d5745bc61670a308f34c71c3f0810d795350bc574e9b56840cad1326cbcN.exe
Resource
win10v2004-20241007-en
General
-
Target
69805d5745bc61670a308f34c71c3f0810d795350bc574e9b56840cad1326cbcN.exe
-
Size
81KB
-
MD5
96892646fabc15185e687cbed6213ed0
-
SHA1
cbed53df825705d41ff023ac9f04ad5f47653c7f
-
SHA256
69805d5745bc61670a308f34c71c3f0810d795350bc574e9b56840cad1326cbc
-
SHA512
2c36724dc935220aa5a17eba59c1b9ddeb44b003e1986fea21299bfac5d7e76cd9da19b112300445952fdec66d3f667c8f3352c63351b49aa8c269dad85088cd
-
SSDEEP
1536:F1PvKv0h4NFTp8bqEKQJ2OdloVDfjnokT+lH0Ouds8RBXs7RDF61hoE:FhQ0hageExJfloR/+0jmyc7RD01hoE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 69805d5745bc61670a308f34c71c3f0810d795350bc574e9b56840cad1326cbcN.exe
Files
-
69805d5745bc61670a308f34c71c3f0810d795350bc574e9b56840cad1326cbcN.exe.exe windows:4 windows x86 arch:x86
0c7c7eb1ac4729e480cc1db17f22f7e0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
ole32
StgCreateDocfile
CoSuspendClassObjects
OleInitialize
CoUninitialize
OleCreate
CoInitialize
kernel32
InterlockedDecrement
CreateFileA
SetStdHandle
CreateDirectoryA
VirtualAlloc
CopyFileA
ResetEvent
VirtualProtect
VirtualFree
SetSystemTimeAdjustment
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
HeapDestroy
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
InitializeCriticalSection
RtlUnwind
LoadLibraryA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapReAlloc
GetConsoleCP
GetConsoleMode
FlushFileBuffers
HeapSize
MultiByteToWideChar
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
CloseHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetFilePointer
Sections
.text Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 349KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE