c:\wrappers_project\objfre_wnet_amd64\amd64\wrapper.pdb
Static task
static1
Behavioral task
behavioral1
Sample
26b519786c62293ca6fa12347a66228efb4de2eaade2609f69d34a821f0cf594.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
26b519786c62293ca6fa12347a66228efb4de2eaade2609f69d34a821f0cf594.exe
Resource
win10v2004-20250217-en
General
-
Target
26b519786c62293ca6fa12347a66228efb4de2eaade2609f69d34a821f0cf594
-
Size
261KB
-
MD5
fac1cc5f820141ec14629225eb9a49f1
-
SHA1
3ad4a0edcd74605ce8cbb346e559038de0b76820
-
SHA256
26b519786c62293ca6fa12347a66228efb4de2eaade2609f69d34a821f0cf594
-
SHA512
3aa77b5b2a9e279329dd6de391af445c6f295e764f2a86a0fb5ec5024a10467c25dc1f1b0d54af12f9ec8faa2b710a8ce7185969ca2139103e2b2fd78e9462a9
-
SSDEEP
6144:FrSwniqL48g03KvWiNx7/3n0u8Z0E0U0Y7O1wmYwL:h1niqL48gwKOi7n0u8Z0E0jaC/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26b519786c62293ca6fa12347a66228efb4de2eaade2609f69d34a821f0cf594
Files
-
26b519786c62293ca6fa12347a66228efb4de2eaade2609f69d34a821f0cf594.exe windows:6 windows x64 arch:x64
42eb304ed140a457c02b1f86d7c1d28b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
kernel32
GetComputerNameA
VirtualAlloc
Sleep
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleW
SetUnhandledExceptionFilter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
GetStartupInfoW
UnhandledExceptionFilter
msvcrt
exit
_acmdln
_initterm
_amsg_exit
__setusermatherr
_commode
_fmode
__set_app_type
?terminate@@YAXXZ
_cexit
_ismbblead
_exit
_XcptFilter
__C_specific_handler
__getmainargs
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 254KB - Virtual size: 255KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 204B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 324B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ