__GetExceptDLLinfo
Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Win32.HLLW.Woofka.25133.24259.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Win32.HLLW.Woofka.25133.24259.exe
Resource
win10v2004-20231215-en
General
-
Target
SecuriteInfo.com.Win32.HLLW.Woofka.25133.24259.exe
-
Size
140KB
-
MD5
01bebfa2f9249c041ed8e580cabdc655
-
SHA1
ea14bcca3ce4887a909166ad000736d5a1eeccc2
-
SHA256
cc8e333647acfa4aac77cdb72c4dbda71c0d30ad072941f95205ab3b69cb7722
-
SHA512
c0ee5dc003726366037a630d55738c7b9b6e4317111060e478234bf41bc7bf146a768d91ee364aee55de82c955ba3bc94df9d2415fd032a7e9d135475ef4bfe1
-
SSDEEP
3072:ZzokZK+rzTZKiwZOLDQpzrIXEulQjYmkvigEY4:Zsk9oiZGzrzuijYmIigE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.Win32.HLLW.Woofka.25133.24259.exe
Files
-
SecuriteInfo.com.Win32.HLLW.Woofka.25133.24259.exe.exe windows:1 windows x86 arch:x86
68ce053d4e7ce2aa121635cfb8be88fc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
CloseHandle
GetStdHandle
DosDateTimeToFileTime
ExitProcess
FileTimeToDosDateTime
Beep
FreeLibrary
GetCommandLineA
GetConsoleCursorInfo
GetConsoleMode
GetConsoleScreenBufferInfo
GetCurrentDirectoryA
GetCurrentThread
CreateFileA
GetDriveTypeA
GetEnvironmentStrings
GetEnvironmentVariableA
GetFileAttributesA
GetFileTime
GetFileType
GetFullPathNameA
GetLastError
GetLocalTime
GetLogicalDrives
GetModuleFileNameA
GetModuleHandleA
GetNumberOfConsoleInputEvents
GetProcAddress
GetCurrentThreadId
FileTimeToLocalFileTime
GetSystemInfo
GetTickCount
GetTimeZoneInformation
GetVersion
LoadLibraryA
LocalFileTimeToFileTime
RaiseException
ReadConsoleInputA
ReadConsoleOutputA
ReadFile
RtlUnwind
SetConsoleCtrlHandler
SetConsoleCursorInfo
SetConsoleCursorPosition
SetConsoleMode
SetConsoleScreenBufferSize
SetConsoleWindowInfo
SetCurrentDirectoryA
SetEnvironmentVariableA
SetFilePointer
SetFileTime
SetHandleCount
SetThreadPriority
Sleep
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WriteConsoleOutputA
WriteFile
GetStartupInfoA
user32
MessageBoxA
EnumThreadWindows
Exports
Exports
Sections
CODE Size: 101KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 22KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ