C:\wiyifizufipej\simohi94\yizuwefinamux-wudijucube-toc.pdb
Static task
static1
Behavioral task
behavioral1
Sample
b8963de11e4bd582ac6fc1f5bb7c5550.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b8963de11e4bd582ac6fc1f5bb7c5550.exe
Resource
win10v2004-20240226-en
General
-
Target
b8963de11e4bd582ac6fc1f5bb7c5550
-
Size
11.1MB
-
MD5
b8963de11e4bd582ac6fc1f5bb7c5550
-
SHA1
60fc7e59a0a531fcdcc45e10e984709c455df4da
-
SHA256
486bfffdb84e136baf6c1dc0fe1dde25cc99ec50ab50a7ffd7d5a3d8e437c32d
-
SHA512
e0955a935485c6daf17bbba949c9ad47d1d26ff25c5cb44b2470c2c5ba7d7871ba593ee9be0557e87e2a1c1345235d1513c0533e0c47ac87df466e748717162d
-
SSDEEP
6144:RgDbYAAc13E27tIFIW7/q/f6vpel+7Iy+Wee:obYAAc13E22CW76Apeloh8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b8963de11e4bd582ac6fc1f5bb7c5550
Files
-
b8963de11e4bd582ac6fc1f5bb7c5550.exe windows:5 windows x86 arch:x86
0ec6c966c0805e7bf09b7a866ef7691a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetCommandLineW
EnumResourceNamesW
SetVolumeLabelA
SearchPathW
FindFirstFileW
OpenFile
TlsGetValue
SetLocalTime
GetDriveTypeW
GetNumberOfConsoleInputEvents
CallNamedPipeA
InterlockedIncrement
InterlockedDecrement
InitializeSListHead
GetProfileSectionA
SetComputerNameW
GetComputerNameW
CreateDirectoryExA
GetModuleHandleW
GenerateConsoleCtrlEvent
GetConsoleTitleA
GetWindowsDirectoryA
GetSystemWow64DirectoryA
EnumResourceTypesA
FindResourceExA
GlobalAlloc
AddRefActCtx
GetVolumeInformationA
Sleep
ReadFileScatter
GetConsoleWindow
GetSystemTimeAdjustment
GetVersionExW
GlobalFlags
GetBinaryTypeA
TerminateProcess
GetAtomNameW
IsDBCSLeadByte
ReadFile
lstrlenW
SetConsoleTitleA
GlobalUnlock
LCMapStringA
VerifyVersionInfoW
CreateDirectoryA
InterlockedExchange
GetFileSizeEx
GetProcAddress
FreeUserPhysicalPages
CreateMemoryResourceNotification
GetPrivateProfileStringA
OpenWaitableTimerA
Process32FirstW
OpenMutexA
SetCalendarInfoW
IsSystemResumeAutomatic
SetConsoleOutputCP
AddAtomW
SetFileApisToANSI
WriteProfileSectionW
GetCommMask
GetTapeParameters
GetSystemInfo
GetOEMCP
FindNextFileA
SetConsoleCursorInfo
CreateIoCompletionPort
WaitCommEvent
FreeEnvironmentStringsW
BuildCommDCBA
GetCurrentDirectoryA
CompareStringA
ScrollConsoleScreenBufferA
CopyFileExA
DeleteFileA
CreateFileA
GetLastError
WideCharToMultiByte
MoveFileA
MultiByteToWideChar
GetCommandLineA
GetStartupInfoA
HeapValidate
IsBadReadPtr
RaiseException
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleFileNameW
GetACP
GetCPInfo
IsValidCodePage
TlsAlloc
TlsSetValue
GetCurrentThreadId
TlsFree
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
ExitProcess
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
HeapFree
VirtualFree
WriteFile
HeapAlloc
HeapSize
HeapReAlloc
VirtualAlloc
DebugBreak
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
LoadLibraryW
RtlUnwind
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
LoadLibraryA
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointer
CloseHandle
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
GetModuleHandleA
user32
GetMenuCheckMarkDimensions
GetMenuInfo
GetComboBoxInfo
GetMenuBarInfo
Sections
.text Size: 207KB - Virtual size: 207KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 45KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 4.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 10.8MB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ