nQTldIkcAJ7LIT.pdb
Static task
static1
Behavioral task
behavioral1
Sample
d2b1389d5b802fee8db7ef55af9189304b7fede7532b1c7c16b0e6ed373012ffN.exe
Resource
win7-20240729-en
General
-
Target
d2b1389d5b802fee8db7ef55af9189304b7fede7532b1c7c16b0e6ed373012ffN.exe
-
Size
168KB
-
MD5
57f35f004a6b9f1c35daafb07b8d0ca0
-
SHA1
dcc7257793980d69e732a2634f31aded1e867e43
-
SHA256
d2b1389d5b802fee8db7ef55af9189304b7fede7532b1c7c16b0e6ed373012ff
-
SHA512
f928f6d4565feb9f124a66dcaba97d0885a0a53a13a325fce3fafd1f979a3f9a0e3e9f0eb0df2fb4464106b740553f1e3e85b347034349c595ba26aa393b6bc0
-
SSDEEP
3072:QFKzngUjWcmyJHsAFOBEUkwMiOYEIBBnr+yaES22n9QBbSj+kTNy027Aizyv4QpW:QFKsShLJHdkhLOYEIBBrda2QnTNlAATO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d2b1389d5b802fee8db7ef55af9189304b7fede7532b1c7c16b0e6ed373012ffN.exe
Files
-
d2b1389d5b802fee8db7ef55af9189304b7fede7532b1c7c16b0e6ed373012ffN.exe.exe windows:5 windows x86 arch:x86
483ff32baf852d0b031eb726bfba64c1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetLocalTime
FlsGetValue
IsProcessInJob
GetCommandLineA
GetCurrentProcessorNumber
GetSystemDefaultLCID
GlobalMemoryStatusEx
CloseHandle
LoadLibraryA
GetCurrentProcess
gdi32
GetStockObject
psapi
GetModuleFileNameExW
winscard
SCardIntroduceCardTypeA
oleaut32
VarDecFromR4
user32
GetTabbedTextExtentA
IsMenu
LoadCursorW
GetSubMenu
GetCaretBlinkTime
SetRectEmpty
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
xUwGZ Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
k4 Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xUwGZ Size: 4KB - Virtual size: 816B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SM Size: 132KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Pna Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
CODE Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ