C:\zoyahod71 xegoseb64\gitomol.pdb
Static task
static1
Behavioral task
behavioral1
Sample
dc1fae2854d1ba58b308e6d3a1f8dd66d9a592d40ce0561bbb2757fad966a7c3.exe
Resource
win7-20231215-en
General
-
Target
dc1fae2854d1ba58b308e6d3a1f8dd66d9a592d40ce0561bbb2757fad966a7c3
-
Size
395KB
-
MD5
224055f89efc490bd3a9ea7587970b9b
-
SHA1
c6e2412de9d97ccd87cba442a2942b8d77c083ce
-
SHA256
dc1fae2854d1ba58b308e6d3a1f8dd66d9a592d40ce0561bbb2757fad966a7c3
-
SHA512
67fe60b696459c9733df4fd742dc6e7c847d6cfc2e899847dfc1cd81b103578dac6f730e3b630fb0e99971ce4bd8c7bee063cdfd70a0bb414e2becff7f3b24a3
-
SSDEEP
6144:ctjJG9WuQ1Nw6cZTCxq2iZuiiGEz2lIun/lpTfOWgVDt8YGrxkr:ctjE9WuucZmBbiiGuqIu/ldfOpxc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dc1fae2854d1ba58b308e6d3a1f8dd66d9a592d40ce0561bbb2757fad966a7c3
Files
-
dc1fae2854d1ba58b308e6d3a1f8dd66d9a592d40ce0561bbb2757fad966a7c3.exe windows:5 windows x86 arch:x86
d7fdc931c022df643265868bda75073d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
FindResourceA
InterlockedDecrement
GetLogicalDriveStringsW
SetComputerNameW
GetTickCount
GetConsoleTitleA
GetUserDefaultLangID
CreateDirectoryExW
GlobalAlloc
GetSystemDirectoryW
GetVolumeInformationA
GlobalFindAtomA
AssignProcessToJobObject
GetConsoleAliasExesLengthW
VerifyVersionInfoA
OpenMutexW
SetLastError
GetTempFileNameW
VirtualAlloc
HeapSize
LoadLibraryA
WriteConsoleA
GetFileType
GetNumberFormatW
RemoveDirectoryW
SetFileApisToANSI
QueryDosDeviceW
EnumResourceTypesW
VirtualProtect
GetFileAttributesExW
DeleteFileW
GetCurrentProcessId
CreateWaitableTimerA
AddConsoleAliasA
CreateFileA
GetProcAddress
GetComputerNameA
GetModuleHandleW
Sleep
ExitProcess
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
MultiByteToWideChar
GetLastError
ReadFile
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetStdHandle
DeleteCriticalSection
HeapFree
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
WriteFile
GetModuleFileNameA
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetModuleHandleA
RaiseException
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetFilePointer
SetStdHandle
RtlUnwind
HeapAlloc
HeapReAlloc
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
FlushFileBuffers
CloseHandle
GetConsoleOutputCP
WriteConsoleW
user32
IsWindowEnabled
CharUpperBuffW
advapi32
ReadEventLogA
Sections
.text Size: 303KB - Virtual size: 303KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 21KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 49KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ