Static task
static1
Behavioral task
behavioral1
Sample
Debito.Pdf________________________________________________________________.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Debito.Pdf________________________________________________________________.exe
Resource
win10v2004-20220812-en
General
-
Target
ab67ba17f2c98ec57aa7fdd7839ebd30c60baf7d29a315660fcea3ed64005189
-
Size
244KB
-
MD5
7d43877fef2508ec2bb3c3b6695f0cf2
-
SHA1
f209a9a946a29eb875f8f7bbf373c2aad00ea478
-
SHA256
ab67ba17f2c98ec57aa7fdd7839ebd30c60baf7d29a315660fcea3ed64005189
-
SHA512
00f2a59e83dc98b89ba2d92544713372c531718a01907f147e56fa2bf204bc545ef8a656bf06df70e1cd7fe8f8d44077d26eedebecb65c27e1b4d6be1acc2581
-
SSDEEP
6144:2GsyA6o8VJybjxaHvxqY1T8gqTc5E7GwnbzmWm0C9aHHaLd:VsD86fxUv8BRG8bzoB9+Ha5
Malware Config
Signatures
Files
-
ab67ba17f2c98ec57aa7fdd7839ebd30c60baf7d29a315660fcea3ed64005189.zip
-
Debito.Pdf________________________________________________________________.exe.exe windows x86
c799bf5a0ec1b12ab83ecbf333853331
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CoInitialize
CoUninitialize
CoCreateInstance
OleUninitialize
OleInitialize
mscms
CloseColorProfile
CheckColors
SetColorProfileElementSize
ConvertIndexToColorName
SetColorProfileElementReference
CreateColorTransformW
CreateDeviceLinkProfile
CreateMultiProfileTransform
CreateProfileFromLogColorSpaceW
DeleteColorTransform
DisassociateColorProfileFromDeviceW
EnumColorProfilesW
GetCMMInfo
GetColorDirectoryW
GetColorProfileElement
GetColorProfileElementTag
GetColorProfileFromHandle
GetColorProfileHeader
GetCountColorProfileElements
GetStandardColorSpaceProfileW
InstallColorProfileW
IsColorProfileTagPresent
IsColorProfileValid
OpenColorProfileW
RegisterCMMW
SelectCMM
SetColorProfileElement
CheckBitmapBits
SetColorProfileHeader
SetStandardColorSpaceProfileW
TranslateBitmapBits
TranslateColors
UninstallColorProfileW
UnregisterCMMW
ConvertColorNameToIndex
msvcrt
??2@YAPAXI@Z
__dllonexit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_wcmdln
exit
_XcptFilter
_exit
memcpy
_open
_close
_dup
_setmode
strlen
strxfrm
??3@YAXPAX@Z
_onexit
kernel32
GetStartupInfoW
GetModuleHandleW
LoadLibraryExW
GetProcAddress
PrepareTape
CreateFileW
SetEndOfFile
GetFileSize
WriteFile
CloseHandle
GetVolumeInformationW
DeleteCriticalSection
Sections
.text Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 120KB - Virtual size: 119KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 156KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 116KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1017B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ