C:\bufovakam\cimariboyi17.pdb
Static task
static1
Behavioral task
behavioral1
Sample
03e315f2fa7bfcfbb9093a302857e6446b1d64580e667039a91107104c2ac800.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral2
Sample
03e315f2fa7bfcfbb9093a302857e6446b1d64580e667039a91107104c2ac800.exe
Resource
win11-20240319-en
General
-
Target
03e315f2fa7bfcfbb9093a302857e6446b1d64580e667039a91107104c2ac800
-
Size
771KB
-
MD5
a911c76f3695c14585bc205d9201804d
-
SHA1
c8422674f6541052f5b40bc0b0b106b57839581c
-
SHA256
03e315f2fa7bfcfbb9093a302857e6446b1d64580e667039a91107104c2ac800
-
SHA512
decf1357c7207e89912b33f6d0071d2112fe01d7612f8002035f0cdeb6e0a19dd3e72d5f63937ab3d54ebe46a5c4f5e2516b0a052d38c079724beb777cdaea79
-
SSDEEP
12288:xJHZKiK+XbETiv41h3z3oouI5RJMcX6MUy7W3KxCaaUQEyVWeX4FnVq83K/qH46h:fKiqJzYGbhwuW3KrayziaVi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03e315f2fa7bfcfbb9093a302857e6446b1d64580e667039a91107104c2ac800
Files
-
03e315f2fa7bfcfbb9093a302857e6446b1d64580e667039a91107104c2ac800.exe windows:5 windows x86 arch:x86
df655224e83eca5567bb998b4c7b988d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetLocaleInfoA
GlobalAddAtomA
ReadConsoleA
GetUserDefaultLCID
InterlockedCompareExchange
CreateHardLinkA
GetNumberFormatA
GetCompressedFileSizeW
GlobalFindAtomA
LoadLibraryW
ReadConsoleInputA
ReadProcessMemory
GetConsoleAliasExesLengthW
FindNextVolumeW
GetConsoleAliasW
WriteConsoleW
FileTimeToSystemTime
GetEnvironmentVariableA
GetNumaProcessorNode
VirtualUnlock
GetLastError
GetCurrentDirectoryW
GetThreadLocale
GetProcAddress
IsValidCodePage
VirtualAllocEx
LoadLibraryA
LocalAlloc
RemoveDirectoryW
GetModuleFileNameA
FindFirstVolumeMountPointA
VirtualProtect
SetCalendarInfoA
GetWindowsDirectoryW
DeleteTimerQueueTimer
GetCurrentProcessId
MoveFileWithProgressW
GetVolumeInformationW
ExitThread
GetThreadContext
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
EncodePointer
DecodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
HeapFree
GetCommandLineW
GetCPInfo
RaiseException
RtlUnwind
HeapAlloc
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
LCMapStringW
IsDebuggerPresent
GetStdHandle
GetFileType
GetProcessHeap
ExitProcess
GetModuleHandleExW
AreFileApisANSI
HeapSize
GetCurrentThreadId
CloseHandle
GetModuleFileNameW
WriteFile
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetACP
GetOEMCP
HeapReAlloc
GetConsoleCP
GetConsoleMode
SetFilePointerEx
LoadLibraryExW
SetStdHandle
FlushFileBuffers
OutputDebugStringW
CreateFileW
SetEndOfFile
ReadFile
ReadConsoleW
gdi32
SelectObject
Sections
.text Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 601KB - Virtual size: 41.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 73KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ