C:\BuildAgent\work\4a73c29f3c4e6ac\downloader\Release\downloader.pdb
Static task
static1
1 signatures
General
-
Target
YandexPackLoader.exe
-
Size
728KB
-
MD5
c8b2fe9899ad85a99e505030fa57b93a
-
SHA1
2dffb9ddc9318d96f5c32834918306dad10b2db7
-
SHA256
c06982190525d9e340f2fa21c8ece1fecf43f7b5509c3a2f4931f2f7f51f75f1
-
SHA512
bb046b8df988edc8ed646799d3105358420b34400a187ef2fcd0684786a7be32681625910a987a9cc66b406d59c6466de8225fe4ab84c8d1fa1805254308ecdd
-
SSDEEP
12288:vLgtTrX65XVeLnt1iIMfxcxlR7UYIpsS8BNzVAbX3kW8jqZNpL7kB:vLwrX0gsFJcx37B7qZT
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource YandexPackLoader.exe
Files
-
YandexPackLoader.exe.exe windows:5 windows x86 arch:x86
2b8eba2cd1a25d418431dffd9683aa80
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
wtsapi32
WTSFreeMemory
WTSQuerySessionInformationW
secur32
LsaEnumerateLogonSessions
LsaFreeReturnBuffer
LsaGetLogonSessionData
wininet
InternetSetStatusCallbackA
InternetOpenA
InternetSetOptionA
InternetOpenUrlA
InternetCloseHandle
kernel32
SizeofResource
LockResource
GlobalAlloc
GlobalFree
LoadResource
FindResourceW
GlobalLock
GetModuleHandleW
GlobalUnlock
GetUserDefaultLangID
GetGeoInfoW
GetModuleHandleA
GetUserGeoID
GetProcAddress
VerSetConditionMask
VerifyVersionInfoW
SetHandleInformation
GetCommandLineW
GetCurrentProcess
InterlockedDecrement
GetModuleFileNameW
GetTempPathW
WaitForSingleObject
GetVersionExW
Sleep
GetLastError
GetVersionExA
CloseHandle
GetCurrentProcessId
CreateProcessW
GetExitCodeProcess
CreateFileW
UnmapViewOfFile
CreateFileMappingW
MapViewOfFile
VirtualQuery
HeapFree
FindClose
DuplicateHandle
MultiByteToWideChar
OutputDebugStringW
HeapAlloc
GetProcessHeap
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindNextFileW
FindFirstFileExW
SetFilePointerEx
ReadFile
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
EncodePointer
GetConsoleCP
FlushFileBuffers
GetFileType
GetACP
WriteFile
GetStdHandle
GetModuleHandleExW
ExitProcess
HeapReAlloc
LoadLibraryExW
RtlUnwind
LocalFree
InitializeSListHead
GetCurrentThreadId
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
ResetEvent
SetStdHandle
WriteConsoleW
ReadConsoleW
HeapSize
SetEndOfFile
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetConsoleMode
LoadLibraryExA
FreeLibrary
VirtualProtect
GetSystemInfo
SetEvent
GetStringTypeW
GetSystemTimeAsFileTime
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
RaiseException
DecodePointer
GetCPInfo
CompareStringW
LCMapStringW
GetLocaleInfoW
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
user32
GetDC
SetWindowPos
SendMessageW
ReleaseCapture
GetParent
DrawTextW
DrawFocusRect
OffsetRect
GetWindowRect
ReleaseDC
GetDlgItem
SetWindowLongW
CharLowerW
wsprintfW
SetWindowRgn
EndDialog
GetDlgCtrlID
UpdateLayeredWindow
GetWindow
MonitorFromWindow
CreateWindowExW
SetWindowTextW
GetActiveWindow
GetMonitorInfoW
ClientToScreen
MapWindowPoints
MoveWindow
SetCapture
GetClientRect
RegisterWindowMessageW
DialogBoxParamW
GetWindowLongW
GetWindowTextLengthW
ScreenToClient
GetWindowDC
BeginPaint
EndPaint
GetWindowTextW
CallWindowProcW
IsWindow
advapi32
CopySid
ConvertSidToStringSidW
GetLengthSid
LsaNtStatusToWinError
OpenProcessToken
GetTokenInformation
shell32
SHCreateDirectoryExW
ShellExecuteExW
ole32
StringFromGUID2
CoCreateGuid
CoInitialize
CoUninitialize
OleRun
CoCreateInstance
CreateStreamOnHGlobal
oleaut32
VariantInit
SysFreeString
VariantClear
SysAllocString
GetErrorInfo
oleacc
LresultFromObject
AccessibleObjectFromWindow
urlmon
URLOpenBlockingStreamW
wintrust
WinVerifyTrust
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
Sections
.text Size: 248KB - Virtual size: 248KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 85KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 1024B - Virtual size: 652B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 358KB - Virtual size: 358KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ