C:\sesanofopuf\selajayew\namohipi.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2de6b8b10f8e9eeae7e1918b8ce2e6a04ef3b5ca0956cae9acfad2d883a1a333.exe
Resource
win10v2004-20240226-en
General
-
Target
2de6b8b10f8e9eeae7e1918b8ce2e6a04ef3b5ca0956cae9acfad2d883a1a333
-
Size
430KB
-
MD5
0e5977c9487600c1d357c82ae7c521d3
-
SHA1
3d5db563c7d76f57c0bcc10b8a4908b8cf776d3f
-
SHA256
2de6b8b10f8e9eeae7e1918b8ce2e6a04ef3b5ca0956cae9acfad2d883a1a333
-
SHA512
9c71d065b8101bd6e3e39ee2dfbc129db5d58317cb7c54dd905ce30d5ab7662c1b1ba91db02ccb23bd9da9a08616fb20d50c837b1cbd6d3cf7c7f36da569b530
-
SSDEEP
12288:9RZOzGbjLt3GCzB1CNFq0Q2rPxa5Zfxtef:9Z3GCzB1aq0Q8a5BPef
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2de6b8b10f8e9eeae7e1918b8ce2e6a04ef3b5ca0956cae9acfad2d883a1a333
Files
-
2de6b8b10f8e9eeae7e1918b8ce2e6a04ef3b5ca0956cae9acfad2d883a1a333.exe windows:5 windows x86 arch:x86
9946caa2b7441c3343eb00a0055e6c2f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetConsoleAliasExesLengthA
FindResourceW
ReadConsoleA
CompareFileTime
_lcreat
MoveFileWithProgressA
GetNumberFormatA
GlobalFindAtomA
LoadLibraryW
TerminateThread
ReadConsoleInputA
CopyFileW
LeaveCriticalSection
GetFileAttributesA
GetConsoleAliasW
WriteConsoleW
GetModuleFileNameW
GetEnvironmentVariableA
GetConsoleOutputCP
GetLastError
GetLocaleInfoA
ChangeTimerQueueTimer
SetLastError
GetProcAddress
InterlockedExchangeAdd
LocalAlloc
QueryDosDeviceW
VirtualLock
GetModuleFileNameA
FindFirstVolumeMountPointA
VirtualProtect
GetWindowsDirectoryW
GlobalAddAtomW
GetTempPathA
FindNextVolumeA
GetVolumeInformationW
ReadFile
SetEndOfFile
RemoveVectoredExceptionHandler
SetThreadContext
GetCurrentDirectoryW
GetNumaNodeProcessorMask
CreateFileW
GetStringTypeW
IsProcessorFeaturePresent
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
GetCommandLineW
RaiseException
RtlUnwind
IsDebuggerPresent
HeapAlloc
HeapSize
EnterCriticalSection
HeapFree
GetCurrentThreadId
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
CloseHandle
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
WriteFile
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetProcessHeap
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
HeapReAlloc
LCMapStringW
GetConsoleCP
GetConsoleMode
SetFilePointerEx
SetStdHandle
FlushFileBuffers
OutputDebugStringW
ReadConsoleW
user32
CharUpperBuffA
gdi32
SetTextColor
advapi32
RegisterEventSourceW
ole32
CoGetPSClsid
Sections
.text Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 246KB - Virtual size: 4.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 85KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ