D:\buildbot\build1\kugou\build\Release\Win32\dataimporter.exe.pdb
Static task
static1
Behavioral task
behavioral1
Sample
7d4c29ede276bd78afe02a6d300ba832171a322f2a807e9bb8adccc6e14318d4N.exe
Resource
win7-20240708-en
General
-
Target
7d4c29ede276bd78afe02a6d300ba832171a322f2a807e9bb8adccc6e14318d4N.exe
-
Size
98KB
-
MD5
8718a53e6228a6d87e1120ce590266c0
-
SHA1
3b4da34ea3ed8a77f1e9b4c3c95b9c395d3d2849
-
SHA256
7d4c29ede276bd78afe02a6d300ba832171a322f2a807e9bb8adccc6e14318d4
-
SHA512
a48f56686decd8d084d799dc38e9ece5f183961817bc95e25a3db62c028b96338f0ff0d0fcb535fd22a53970f44b71028ff4ef158da1bb36aa8069f799456cd6
-
SSDEEP
1536:7sn07NhkDonYIwlJZo/DNeceNGj94YQ4pOW4X8tGFKFkuz2ksKXjjYMZuLZ+3uVO:KoL/8ceN89bQ4pBG8ck2ktXLu1+S8NT7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7d4c29ede276bd78afe02a6d300ba832171a322f2a807e9bb8adccc6e14318d4N.exe
Files
-
7d4c29ede276bd78afe02a6d300ba832171a322f2a807e9bb8adccc6e14318d4N.exe.exe windows:5 windows x86 arch:x86
8eb468dccfb4368aca8a3620556275cc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetProcAddress
FreeLibrary
LoadLibraryExW
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetModuleHandleW
user32
MessageBoxW
vcruntime140
_except_handler4_common
memset
api-ms-win-crt-runtime-l1-1-0
_initialize_onexit_table
_register_onexit_function
_cexit
_controlfp_s
terminate
_initterm
_exit
_c_exit
_get_wide_winmain_command_line
_initialize_wide_environment
_configure_wide_argv
_register_thread_local_exe_atexit_callback
_set_app_type
_seh_filter_exe
exit
_crt_atexit
_initterm_e
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-stdio-l1-1-0
_set_fmode
__p__commode
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
api-ms-win-crt-heap-l1-1-0
_set_new_mode
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 900B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 68KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE