C:\mosizukazah32 rodesaxomipuhe l.pdb
Static task
static1
Behavioral task
behavioral1
Sample
3575f81a2f2df257acac35757ef72c68313f10127bb1b3e595e469927b4b69ad.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3575f81a2f2df257acac35757ef72c68313f10127bb1b3e595e469927b4b69ad.exe
Resource
win10-20231220-en
General
-
Target
3575f81a2f2df257acac35757ef72c68313f10127bb1b3e595e469927b4b69ad
-
Size
507KB
-
MD5
b5ba95d102461e08aecc8ad7a1ee0e9f
-
SHA1
2d95ab9029cc472a0a831697042a714091a74cf0
-
SHA256
3575f81a2f2df257acac35757ef72c68313f10127bb1b3e595e469927b4b69ad
-
SHA512
894272fc560504bd747b37eb09df7df28ce5c174b5059e5fcaf57310a85e6bfc1050aa54b610a5b5e80636be2f051c8e55b5177236517fb088f96e479ace8258
-
SSDEEP
12288:WlX+N/ioeox6kjwcvAdQstCKu3xE3RambHkuZ:SOx1hoCP7mzk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3575f81a2f2df257acac35757ef72c68313f10127bb1b3e595e469927b4b69ad
Files
-
3575f81a2f2df257acac35757ef72c68313f10127bb1b3e595e469927b4b69ad.exe windows:5 windows x86 arch:x86
af0d9d0183e177bdad0307989fc3cd5a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
AddConsoleAliasW
SetCommBreak
GetTickCount
GetConsoleTitleA
LoadLibraryW
SetComputerNameExW
CreateJobObjectA
GetLastError
SetLastError
GetProcAddress
AttachConsole
VirtualAlloc
MoveFileW
RemoveDirectoryA
LoadLibraryA
InterlockedDecrement
LocalAlloc
FindFirstVolumeMountPointW
SetFileApisToANSI
QueryDosDeviceW
FindNextChangeNotification
GlobalFindAtomW
GetModuleFileNameA
GetModuleHandleA
GetFileAttributesExW
FatalAppExitA
GetCurrentProcessId
MoveFileWithProgressW
DebugBreak
DeleteFileA
WriteConsoleA
SetVolumeLabelA
MultiByteToWideChar
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
Sleep
HeapSize
ExitProcess
HeapFree
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
WriteFile
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapCreate
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
HeapAlloc
HeapReAlloc
InitializeCriticalSectionAndSpinCount
RtlUnwind
LCMapStringA
WideCharToMultiByte
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
RaiseException
advapi32
DeleteAce
Sections
.text Size: 414KB - Virtual size: 414KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 18KB - Virtual size: 38.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 63KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ