C:\det67_pibinacaxu-hupatare.pdb
Static task
static1
Behavioral task
behavioral1
Sample
64dd6725a6c46ce857d299caeb135a10f62b2213eb8c5f11b599cc495ad550e3.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
64dd6725a6c46ce857d299caeb135a10f62b2213eb8c5f11b599cc495ad550e3.exe
Resource
win10-20231220-en
General
-
Target
64dd6725a6c46ce857d299caeb135a10f62b2213eb8c5f11b599cc495ad550e3
-
Size
245KB
-
MD5
911447afe8770f95eee6407b933e50e1
-
SHA1
0d3bb345bc2e1faef3d26a9628b0a7d4347a1e66
-
SHA256
64dd6725a6c46ce857d299caeb135a10f62b2213eb8c5f11b599cc495ad550e3
-
SHA512
810dc3c5cf0d4dc3b8b7184ebc8ac08f836fe04dd7088e7fc9e142a2c6636de0da9a46e8f22829b21ce577f68b164b0a0d5dc35b2136a3824766c0acada48afa
-
SSDEEP
3072:/bo5Y2LiCkpd/K8YhADpAKiVrykBQouUrYlrD7kLEuvX5NnsFqx:/boC2LiFNKnua55ruDMfRNsF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64dd6725a6c46ce857d299caeb135a10f62b2213eb8c5f11b599cc495ad550e3
Files
-
64dd6725a6c46ce857d299caeb135a10f62b2213eb8c5f11b599cc495ad550e3.exe windows:5 windows x86 arch:x86
e368dc091dc26b6066442b735ec875e5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetSystemDefaultLangID
InterlockedDecrement
QueryDosDeviceA
MoveFileWithProgressA
GetModuleHandleW
GetTickCount
VirtualFree
GetConsoleAliasesLengthA
FreeConsole
GetModuleFileNameW
SetComputerNameExW
GetStartupInfoW
CreateJobObjectA
GetLastError
SetLastError
ReadConsoleOutputCharacterA
GetProcAddress
VirtualAlloc
SetVolumeLabelW
LoadLibraryA
WriteConsoleA
InterlockedExchangeAdd
LocalAlloc
MoveFileA
FindFirstVolumeMountPointW
RemoveDirectoryW
FindNextChangeNotification
GlobalFindAtomW
GetStringTypeW
PurgeComm
GetFileAttributesExW
WaitForDebugEvent
WriteConsoleOutputAttribute
SetCalendarInfoA
GetCurrentProcessId
DeleteFileA
MultiByteToWideChar
Sleep
ExitProcess
GetCPInfo
InterlockedIncrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
CloseHandle
EnterCriticalSection
LeaveCriticalSection
RaiseException
WriteFile
GetStdHandle
GetModuleFileNameA
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapCreate
QueryPerformanceCounter
GetSystemTimeAsFileTime
LCMapStringA
WideCharToMultiByte
LCMapStringW
GetStringTypeA
GetLocaleInfoA
HeapAlloc
HeapReAlloc
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
RtlUnwind
GetModuleHandleA
HeapSize
GetConsoleOutputCP
WriteConsoleW
SetFilePointer
CreateFileA
Sections
.text Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 4.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ