Static task
static1
Behavioral task
behavioral1
Sample
d3caef4c00bf752f2ebf8e714b483b52.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d3caef4c00bf752f2ebf8e714b483b52.exe
Resource
win10v2004-20240226-en
General
-
Target
d3caef4c00bf752f2ebf8e714b483b52
-
Size
4.4MB
-
MD5
d3caef4c00bf752f2ebf8e714b483b52
-
SHA1
fc18356b5e28eb677e757ede716b0594aa4efeb2
-
SHA256
f62db2b82efb9e434fe21a4c6744d0319b5d49f22f20ebd424c8860643019061
-
SHA512
f9f3a1f28358a7084398e1efb859b47d3fd5374368dfee5db06c6d93916b45397e8b48e43f2c4983fdb346340be7f931cc241acaa7b999222986468cb50a6fbd
-
SSDEEP
98304:Uulx683O0FRspl0lL/tA5fPm1l3HghdvSfEwospI5NoCDfEJJJem8Sd:7JzQ0t8fe1tUvSPXr2WJ0dSd
Malware Config
Signatures
Files
-
d3caef4c00bf752f2ebf8e714b483b52.exe windows:5 windows x86 arch:x86
f8220ac65423f0267d42ab4cbda2e1d4
Code Sign
c7:e1:18:91:50:47:40:76:2d:87:0c:61:1a:2f:72:6bCertificate
IssuerPOSTALCODE=10188Not Before22/07/2021, 13:47Not After22/07/2022, 13:47SubjectPOSTALCODE=1018866:b1:c5:62:55:6a:84:5a:cc:84:0e:d6:e8:74:a5:1c:c5:ef:fa:a7:0b:c4:13:ec:bf:56:87:fd:68:41:93:b2Signer
Actual PE Digest66:b1:c5:62:55:6a:84:5a:cc:84:0e:d6:e8:74:a5:1c:c5:ef:fa:a7:0b:c4:13:ec:bf:56:87:fd:68:41:93:b2Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
C:\fulahicanadudu\higudirusi_cezebumite66_weyaj_jopujesoc.pdb
Imports
kernel32
GetCPInfoExW
WriteConsoleInputW
ReadConsoleInputA
GetConsoleAliasW
SetCommTimeouts
InitializeSListHead
GetConsoleDisplayMode
CreateConsoleScreenBuffer
GetConsoleCP
VerifyVersionInfoA
WaitNamedPipeA
CreateMutexW
WriteConsoleA
SetLastError
CreateFileA
WritePrivateProfileSectionW
GetPrivateProfileSectionW
EnumDateFormatsExA
SetStdHandle
LoadLibraryW
RequestDeviceWakeup
FindFirstVolumeA
ReadFile
BuildCommDCBA
VerLanguageNameA
SetFileApisToANSI
WriteProcessMemory
ResetEvent
Sleep
EndUpdateResourceA
GetCPInfo
SetConsoleCtrlHandler
SetConsoleTitleA
SetFilePointer
GetCurrentConsoleFont
AddRefActCtx
AttachConsole
GetConsoleAliasesLengthW
ZombifyActCtx
ReadConsoleOutputW
GetSystemWindowsDirectoryA
GetStringTypeW
BuildCommDCBAndTimeoutsA
HeapAlloc
HeapLock
GetAtomNameW
GlobalSize
HeapValidate
GetGeoInfoA
GetCurrentProcess
VirtualProtect
GetProcAddress
GetModuleHandleA
CreateThread
GetVersionExA
GetOEMCP
WaitForSingleObject
GetSystemPowerStatus
VerifyVersionInfoW
WriteConsoleOutputCharacterW
LocalAlloc
GetMailslotInfo
SetEnvironmentVariableW
GetFileAttributesExA
GetComputerNameW
CommConfigDialogA
GetConsoleWindow
GetDiskFreeSpaceW
GetLongPathNameW
GetUserDefaultLangID
CopyFileA
LeaveCriticalSection
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
RaiseException
RtlUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GetLastError
HeapFree
TerminateProcess
IsDebuggerPresent
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
ExitProcess
WriteFile
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
GetACP
IsValidCodePage
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
InitializeCriticalSectionAndSpinCount
LoadLibraryA
WideCharToMultiByte
GetConsoleMode
FlushFileBuffers
LCMapStringA
LCMapStringW
GetConsoleOutputCP
WriteConsoleW
CloseHandle
user32
GetAltTabInfoW
gdi32
GetCharWidth32A
advapi32
AdjustTokenPrivileges
BackupEventLogA
Sections
.text Size: 4.3MB - Virtual size: 4.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 19KB - Virtual size: 4.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 542KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ