c:\Development\DLL\FTBUSUI\Release\FTBUSUI.pdb
Static task
static1
Behavioral task
behavioral1
Sample
cee4e31bbcd33cae0f12cb85da7eff77b73aa97022ccc937a0e3d94bb082579bN.dll
Resource
win7-20240903-en
General
-
Target
cee4e31bbcd33cae0f12cb85da7eff77b73aa97022ccc937a0e3d94bb082579bN.exe
-
Size
180KB
-
MD5
a9004105a493b5e7701fa7bb6205b800
-
SHA1
f76eeb12ea007414c63cb3fd5ec880f6e967e463
-
SHA256
cee4e31bbcd33cae0f12cb85da7eff77b73aa97022ccc937a0e3d94bb082579b
-
SHA512
5a91e594584919593df9aee71e532366a69368e21a733f3f6f3c4c8637110769ceeb5a82da78bb854c821158e6c849b4898b2529738988f2efdf7c61fc2a41ac
-
SSDEEP
3072:Qv546d2dI6tWy2lQBV+UdE+rECWp7hKs5N+:Qh46d6BV+UdvrEFp7hKS+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cee4e31bbcd33cae0f12cb85da7eff77b73aa97022ccc937a0e3d94bb082579bN.exe
Files
-
cee4e31bbcd33cae0f12cb85da7eff77b73aa97022ccc937a0e3d94bb082579bN.exe.dll windows:4 windows x86 arch:x86
98d4b5ce88c34a933c0d00ed38da29f2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
setupapi
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsA
SetupDiGetDeviceInstanceIdA
SetupDiGetDeviceInterfaceDetailA
kernel32
GetCurrentThread
CompareStringW
CompareStringA
GetTimeZoneInformation
LCMapStringW
LCMapStringA
OutputDebugStringA
LocalFree
LoadLibraryA
LoadLibraryW
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetFileAttributesW
GetVersion
GetLastError
SetLastError
GetModuleFileNameW
LocalAlloc
CloseHandle
DeviceIoControl
CreateFileA
GetStringTypeW
GetStringTypeA
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetLocaleInfoW
GetCurrentThreadId
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
InterlockedDecrement
SetEnvironmentVariableA
Sleep
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
WriteFile
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
InitializeCriticalSection
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
HeapSize
MultiByteToWideChar
GetLocaleInfoA
user32
SetWindowLongA
EnableWindow
SetCursor
LoadCursorA
IsDlgButtonChecked
GetWindowLongA
GetDlgItem
CheckDlgButton
Exports
Exports
DllMain
FTBUSUIPropPageProvider
Sections
.text Size: 72KB - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ