nQTldIkcAJ7LIT.pdb
Static task
static1
Behavioral task
behavioral1
Sample
868bffcef3c7af0b582a566c95f3923d304a152017a940e7079766b4fbf3223a.exe
Resource
win7-20240903-en
General
-
Target
868bffcef3c7af0b582a566c95f3923d304a152017a940e7079766b4fbf3223a.exe
-
Size
168KB
-
MD5
149c4d1d0e5d83771fa028a373e9936f
-
SHA1
c1549fee07ec73c2b649e9f69193420544a9e024
-
SHA256
868bffcef3c7af0b582a566c95f3923d304a152017a940e7079766b4fbf3223a
-
SHA512
413031e56f00c7a0e35e23f86e856cdf2450bc985d30147d5688ddff4a0cd712f5338ad611b5a1b772d44517ea60d727ffa7baef6ef5b39f4fc7855b562c8560
-
SSDEEP
3072:QFKzngUjWcmyJHsAFOBEUkwMiOYEIBBnr+yaES22n9QBbSj+kTNy027Aizyv4QpD:QFKsShLJHdkhLOYEIBBrda2QnTNlAATH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 868bffcef3c7af0b582a566c95f3923d304a152017a940e7079766b4fbf3223a.exe
Files
-
868bffcef3c7af0b582a566c95f3923d304a152017a940e7079766b4fbf3223a.exe.exe windows:5 windows x86 arch:x86
483ff32baf852d0b031eb726bfba64c1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetLocalTime
FlsGetValue
IsProcessInJob
GetCommandLineA
GetCurrentProcessorNumber
GetSystemDefaultLCID
GlobalMemoryStatusEx
CloseHandle
LoadLibraryA
GetCurrentProcess
gdi32
GetStockObject
psapi
GetModuleFileNameExW
winscard
SCardIntroduceCardTypeA
oleaut32
VarDecFromR4
user32
GetTabbedTextExtentA
IsMenu
LoadCursorW
GetSubMenu
GetCaretBlinkTime
SetRectEmpty
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
xUwGZ Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
k4 Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xUwGZ Size: 4KB - Virtual size: 816B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SM Size: 132KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Pna Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
CODE Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ