D:\a\weasel\weasel\output\WeaselSetup.pdb
Static task
static1
Behavioral task
behavioral1
Sample
e467fc841e44ce1fb210909c0bf8532defff03d640709b8efb414cd984c89dd5.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
e467fc841e44ce1fb210909c0bf8532defff03d640709b8efb414cd984c89dd5.exe
Resource
win10v2004-20240611-en
General
-
Target
e467fc841e44ce1fb210909c0bf8532defff03d640709b8efb414cd984c89dd5
-
Size
224KB
-
MD5
cc87d8883b64f32bce2a92b26dfa8adc
-
SHA1
dbe6b13456249e843d80de97a53a494e0141519b
-
SHA256
e467fc841e44ce1fb210909c0bf8532defff03d640709b8efb414cd984c89dd5
-
SHA512
87bf6bcef762fe92abb5524193b7c021f938d16cd1b7eeb126ece2980e52c01f473d63fff3a2afa320c35a2e05bafe2b0e52f97239c03f8ee6c6d7a516a31341
-
SSDEEP
3072:it+yMqQxkpABFteCrQlFUtLJWWfJx9JlzoftZb8KlqCqRpMhO+Cngm3bTMlFhXw8:itSqQxkpABFnflzE5qZjMhmgmstEhzO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e467fc841e44ce1fb210909c0bf8532defff03d640709b8efb414cd984c89dd5
Files
-
e467fc841e44ce1fb210909c0bf8532defff03d640709b8efb414cd984c89dd5.exe windows:6 windows x86 arch:x86
fa9eacb96cc32c87f2f7bf466f246ab1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
imm32
ImmInstallIMEW
kernel32
HeapAlloc
GetProcessHeap
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
RaiseException
DecodePointer
DeleteCriticalSection
FreeLibrary
lstrcmpiW
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
GetCurrentThreadId
SetLastError
CreateFileW
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
SetFilePointerEx
GetStringTypeW
SetStdHandle
HeapReAlloc
LCMapStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
HeapSize
HeapDestroy
GetFileAttributesW
CloseHandle
WaitForSingleObject
GetProcAddress
GetSystemDirectoryW
GetModuleHandleW
GetModuleFileNameW
ExitProcess
GetLastError
GetSystemWow64DirectoryW
DeleteFileW
MoveFileExW
CopyFileW
WriteConsoleW
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
GetFileType
WriteFile
GetStdHandle
GetModuleHandleExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
HeapFree
EncodePointer
InitializeSListHead
InterlockedPopEntrySList
InterlockedPushEntrySList
GetCurrentProcess
FlushInstructionCache
IsProcessorFeaturePresent
VirtualAlloc
VirtualFree
LoadLibraryExA
IsDebuggerPresent
OutputDebugStringW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
RtlUnwind
user32
GetDlgItem
CheckRadioButton
SetWindowTextW
EnableWindow
SetWindowPos
UnloadKeyboardLayout
MessageBoxW
MapWindowPoints
DialogBoxParamW
GetActiveWindow
DestroyWindow
DefWindowProcW
CharNextW
UnregisterClassW
SetWindowLongW
EndDialog
SetFocus
GetWindowTextLengthW
GetWindowTextW
IsDlgButtonChecked
GetWindow
GetWindowLongW
MonitorFromWindow
GetMonitorInfoW
GetWindowRect
GetParent
GetClientRect
advapi32
RegDeleteKeyW
RegQueryValueExW
RegCloseKey
RegOpenKeyExW
RegEnumKeyExW
RegQueryInfoKeyW
RegCreateKeyExW
RegDeleteValueW
RegCreateKeyW
RegEnumKeyW
RegSetValueExW
RegOpenKeyW
shell32
ShellExecuteExW
ole32
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
CoInitialize
CoCreateInstance
CoTaskMemRealloc
oleaut32
VarUI4FromStr
comctl32
InitCommonControlsEx
Sections
.text Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 49KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ