C:\DistributedAutoLink\Temp\CompileOutputDir\popwndexe.pdb
Static task
static1
Behavioral task
behavioral1
Sample
33e191b6d740670bbe3c8adbfe5ad4d6407a2b4df6a0c0c44ffa09adfe92ac03N.exe
Resource
win7-20240708-en
General
-
Target
33e191b6d740670bbe3c8adbfe5ad4d6407a2b4df6a0c0c44ffa09adfe92ac03N.exe
-
Size
232KB
-
MD5
7fdfbf18f3e1431ffd2704cd5c8eaae0
-
SHA1
1fc2c1eb7a386850a8e5870d05be4a783d9c5a57
-
SHA256
33e191b6d740670bbe3c8adbfe5ad4d6407a2b4df6a0c0c44ffa09adfe92ac03
-
SHA512
60e6871b26b8878d7cbaaa7f0dc8250ec0ebb8baf3e2257d3a8f20dfae5c5c061f69abc3febb03a5130e0cd5ba0efcf03b75136c11e44b3f2d0945083f79a43b
-
SSDEEP
6144:Iwf4+0byL/GXFMuQU1U+HCAKpOVlivJWD:Iwf4+0byTqBCAK0We
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 33e191b6d740670bbe3c8adbfe5ad4d6407a2b4df6a0c0c44ffa09adfe92ac03N.exe
Files
-
33e191b6d740670bbe3c8adbfe5ad4d6407a2b4df6a0c0c44ffa09adfe92ac03N.exe.exe windows:5 windows x86 arch:x86
242ea6761cd62e5bf84909e1f4a8401e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
WaitForSingleObject
GetModuleHandleW
GetProcAddress
GetModuleFileNameW
FreeLibrary
CreateFileW
GetFileSize
LoadLibraryW
GetCurrentThreadId
lstrcpyW
lstrcatW
GetCurrentProcess
GetWindowsDirectoryW
DeleteFileW
GetVersionExW
GetPrivateProfileIntW
GetPrivateProfileStringW
lstrcpynW
GetTickCount
OutputDebugStringW
CloseHandle
SetFileAttributesW
MoveFileW
SetFilePointer
WriteFile
GetLocalTime
OpenProcess
CreateProcessW
GetExitCodeProcess
CreateMutexW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
GetCommandLineW
ReadFile
FlushFileBuffers
CreateFileA
FindResourceExW
FindResourceW
SizeofResource
LockResource
LoadResource
GetLastError
GetCurrentProcessId
lstrlenW
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
InitializeCriticalSectionAndSpinCount
LoadLibraryA
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
GetStartupInfoW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
LCMapStringW
Sleep
ExitProcess
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
HeapCreate
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
VirtualAlloc
RtlUnwind
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetConsoleCP
GetConsoleMode
user32
CharUpperW
IsWindow
FindWindowW
SendMessageW
wsprintfW
advapi32
LookupPrivilegeValueW
GetTokenInformation
OpenProcessToken
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
AdjustTokenPrivileges
shell32
ShellExecuteExW
ole32
CoUninitialize
CoInitialize
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
Sections
.text Size: 69KB - Virtual size: 69KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 83KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE