C:\gomeyoved\hukoh.pdb
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20240226-en
General
-
Target
file.exe
-
Size
294KB
-
MD5
73c5e5058bdb7449f2e38f1c7645b9ad
-
SHA1
e9b584910e84b4af4394d944fd178d2b110c5c96
-
SHA256
d671b17afb9e245e629823dccd61d78257df00834fb2b1fa9431c6439c62fd45
-
SHA512
0fb7942508977e8f94dc74c6b3d3e29d2236945896c61b0c7a2a0a3e8e8cd68f3f6985e53208e213f35acc34e290a01eb3534e91577f28f7b7abe06cfe6ed69c
-
SSDEEP
3072:VOeQ/4QgHDEGn6R3U23Kc+m+vNR2T+wtkeJleNMnIVzwlxyMBzfSz+RDRn/7Yoi:1XEzk23p9iVwtTkMnJlwMBzfhxh/7e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource file.exe
Files
-
file.exe.exe windows:5 windows x86 arch:x86
37d5d9e9c6c8829366c7450bc2f82d1d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetSystemDefaultLangID
DebugActiveProcess
SetThreadContext
WriteConsoleInputW
GetCurrentProcess
GetNumberFormatA
ReadConsoleW
GetWindowsDirectoryA
GetCompressedFileSizeW
GetVolumeInformationA
GlobalFindAtomA
LoadLibraryW
TerminateThread
GetLocaleInfoW
ReadProcessMemory
GetConsoleAliasExesLengthW
GetConsoleAliasW
GetFileAttributesW
GetModuleFileNameW
GetACP
GetLastError
GetThreadLocale
RemoveDirectoryA
CopyFileA
VirtualAllocEx
GetNumaHighestNodeNumber
LoadLibraryA
WriteConsoleA
InterlockedExchangeAdd
LocalAlloc
SetCalendarInfoW
CreateHardLinkW
AddAtomW
VirtualLock
FindFirstVolumeMountPointA
VirtualProtect
ReadConsoleInputW
DeleteTimerQueueTimer
FindNextVolumeA
CreateFileW
WriteConsoleW
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
EncodePointer
DecodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
HeapFree
GetCommandLineA
GetCPInfo
RaiseException
RtlUnwind
HeapAlloc
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
Sleep
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
GetProcAddress
LCMapStringW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
IsValidCodePage
GetOEMCP
GetCurrentThreadId
IsDebuggerPresent
GetStdHandle
GetFileType
GetProcessHeap
ReadFile
ExitProcess
GetModuleHandleExW
HeapSize
CloseHandle
GetModuleFileNameA
WriteFile
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
HeapReAlloc
GetConsoleCP
GetConsoleMode
SetFilePointerEx
LoadLibraryExW
SetStdHandle
FlushFileBuffers
OutputDebugStringW
winhttp
WinHttpReadData
Sections
.text Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 103KB - Virtual size: 41.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 57KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ