C:\vebuho mecu\gagewox\vatiw 29 hucuhokohoc ciza98_fe.pdb
Static task
static1
Behavioral task
behavioral1
Sample
d9ccd79a7564b1ba6c4547e47ae93ce4.exe
Resource
win7-20240221-en
General
-
Target
d9ccd79a7564b1ba6c4547e47ae93ce4
-
Size
489KB
-
MD5
d9ccd79a7564b1ba6c4547e47ae93ce4
-
SHA1
9e1579f7cf67c79b455b204dd79a353af6c51793
-
SHA256
ab928dcfb571222c0f346b93befee4f06baefeb555261ddf726a2ba4a4f84abe
-
SHA512
40f6639a76705f6fee916286146677f22b89bcafdbec8e1c89d9d58796837dadbdb2bbed8bdb8cdd5d4a584d0c7a5b1948354db0acc6056aabbc791888c005df
-
SSDEEP
12288:A8cOenWRkCJ+PcRPe1B/jqQbI6ttWHX8h60z:jKWb8SPQj7twE60
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d9ccd79a7564b1ba6c4547e47ae93ce4
Files
-
d9ccd79a7564b1ba6c4547e47ae93ce4.exe windows:5 windows x86 arch:x86
856de012d16335e459e934f601b8fd9d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
WriteTapemark
SetConsoleCP
VerifyVersionInfoA
WaitNamedPipeA
GetConsoleAliasesW
WriteConsoleW
GetLastError
CreateFileA
DeleteFileA
WritePrivateProfileSectionA
GetPrivateProfileSectionW
InitializeCriticalSectionAndSpinCount
GetLongPathNameA
RequestDeviceWakeup
LoadLibraryW
FlushFileBuffers
SetTapePosition
ReadFile
WriteFile
GetProfileSectionA
BuildCommDCBA
FindActCtxSectionGuid
SetEndOfFile
SetFileShortNameA
WriteProcessMemory
GetFileAttributesA
SetEvent
PulseEvent
GetTapeParameters
WaitForSingleObject
WaitForMultipleObjects
FreeConsole
SetConsoleCtrlHandler
SetConsoleTitleA
GenerateConsoleCtrlEvent
SetConsoleWindowInfo
AttachConsole
ReadConsoleW
GetProcessHeap
AllocConsole
BuildCommDCBAndTimeoutsW
GetGeoInfoW
GetCurrentProcess
GetProcAddress
GetModuleHandleA
CreateThread
GetProcessHeaps
GetOEMCP
WaitForMultipleObjectsEx
SetSystemPowerState
FindAtomW
SetFileApisToOEM
OpenWaitableTimerW
HeapValidate
GetDiskFreeSpaceA
WriteConsoleInputA
ReadConsoleInputA
GetCPInfoExW
ReleaseActCtx
GetUserDefaultLCID
SleepEx
GetConsoleAliasesLengthA
GetCommandLineA
GetStartupInfoA
HeapAlloc
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
SetFilePointer
Sleep
ExitProcess
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
IsValidCodePage
RtlUnwind
MultiByteToWideChar
SetStdHandle
LoadLibraryA
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize
CloseHandle
WriteConsoleA
GetConsoleOutputCP
user32
GetAltTabInfoW
gdi32
GetCharWidth32A
advapi32
AdjustTokenPrivileges
MapGenericMask
AreAnyAccessesGranted
AdjustTokenGroups
Exports
Exports
@GetVice@0
Sections
.text Size: 369KB - Virtual size: 369KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 18KB - Virtual size: 5.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 100KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ