C:\zotiwoxere\ruyodogiti f.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2bc8639cc65bbaec9670c58fa27963a3.exe
Resource
win7-20231129-en
General
-
Target
2bc8639cc65bbaec9670c58fa27963a3.exe
-
Size
295KB
-
MD5
2bc8639cc65bbaec9670c58fa27963a3
-
SHA1
df2bb824f891d5739bc0e4ee35987eb9d6beb6f7
-
SHA256
615b666d7dbd523685e35a7bd7abb3d93f3cf82a9bc3374be0134be716a89080
-
SHA512
10af5b8e849126b005a246570bd2a71e4c2c973172c1d0564b24b01937a8426b2b6f29a712200d04005b9954fd4a082faa0f4a3996ddf6f7951fdb83cde93a0a
-
SSDEEP
6144:VrLjp+1xf5atcTdV8Gviyn49UKRF9u+diYp0va:VrXpIf4tcRViynAU1+0Yma
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2bc8639cc65bbaec9670c58fa27963a3.exe
Files
-
2bc8639cc65bbaec9670c58fa27963a3.exe.exe windows:5 windows x86 arch:x86
7971ac7f33adf28893231e5f2764736c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
SetVolumeLabelA
SetComputerNameExA
InterlockedIncrement
InterlockedDecrement
CreateJobObjectW
QueryDosDeviceA
SetCommBreak
GetTickCount
EnumResourceTypesA
GetModuleFileNameW
GetLogicalDriveStringsA
GetLastError
SetLastError
GetProcAddress
AttachConsole
VirtualAlloc
LoadLibraryA
WriteConsoleA
LocalAlloc
MoveFileA
RemoveDirectoryW
FindNextChangeNotification
GlobalFindAtomW
FindFirstVolumeMountPointA
GetModuleHandleA
GetConsoleTitleW
GetFileAttributesExW
FatalAppExitA
GetCurrentProcessId
AddConsoleAliasA
DeleteFileA
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
HeapCreate
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
HeapAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
InitializeCriticalSectionAndSpinCount
RtlUnwind
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize
RaiseException
Sections
.text Size: 241KB - Virtual size: 241KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 18KB - Virtual size: 38.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ