C:\koyilojagu\wujuvakowa.pdb
Static task
static1
Behavioral task
behavioral1
Sample
3e1cfc2bac4e676c4707261418c0cec93dfd8906bb5b5ca7792098b2efadc1eb.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
3e1cfc2bac4e676c4707261418c0cec93dfd8906bb5b5ca7792098b2efadc1eb.exe
Resource
win10v2004-20240704-en
General
-
Target
3e1cfc2bac4e676c4707261418c0cec93dfd8906bb5b5ca7792098b2efadc1eb
-
Size
333KB
-
MD5
d0a8d12d6bb96d1391b2cd2a669058cd
-
SHA1
543b101feae5b45555bc755d187be12d0dd0cc17
-
SHA256
3e1cfc2bac4e676c4707261418c0cec93dfd8906bb5b5ca7792098b2efadc1eb
-
SHA512
24c8288ba91fce89eb75f6e80003a210010f660b1716e9947be3d477878bbdd8637638d205d0d0c139ef8b44a8f6656e81c3eb5bdc7660fb64acba70f8232404
-
SSDEEP
6144:8zIZigwsjzlDVwo98su6Q1rQhgozE/cUE+eIwdR0SNhyWw5HDgcSNoQf2u5FigaQ:VZigFPfi76OVKE/c0udhyb5HDg/CO2u+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e1cfc2bac4e676c4707261418c0cec93dfd8906bb5b5ca7792098b2efadc1eb
Files
-
3e1cfc2bac4e676c4707261418c0cec93dfd8906bb5b5ca7792098b2efadc1eb.exe windows:5 windows x86 arch:x86
55a2b5a2ae91031aec8b458899df3011
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
InterlockedDecrement
GetLocaleInfoA
InterlockedIncrement
_lwrite
GetCommTimeouts
GetSystemDirectoryA
CreateEventW
WriteConsoleW
VerifyVersionInfoA
BuildCommDCBW
AddConsoleAliasW
HeapLock
PeekConsoleInputW
EnumDateFormatsW
ResetEvent
UnregisterWait
LoadLibraryA
WaitNamedPipeW
FindResourceExA
DeleteTimerQueue
GetFirmwareEnvironmentVariableW
GetModuleFileNameW
BeginUpdateResourceW
GetConsoleAliasExesLengthW
EnumTimeFormatsW
CopyFileA
ReadConsoleOutputCharacterA
UnhandledExceptionFilter
LocalAlloc
GetProcAddress
GetUserDefaultLangID
GetSystemWindowsDirectoryW
FindFirstChangeNotificationA
EndUpdateResourceW
WritePrivateProfileStringA
EnumResourceNamesA
LocalReAlloc
GlobalReAlloc
AreFileApisANSI
GetCurrentDirectoryA
GetConsoleAliasesLengthW
GetAtomNameA
SetFileAttributesA
SetConsoleTitleW
VerSetConditionMask
GetCurrentProcess
GetProcessWorkingSetSize
GetLongPathNameW
GetThreadLocale
GetSystemDefaultLCID
GetCurrentProcessId
GetLastError
SetComputerNameExA
FindFirstFileExA
BuildCommDCBAndTimeoutsW
EnterCriticalSection
EnumCalendarInfoExW
GetDiskFreeSpaceA
GetConsoleAliasExesA
GlobalMemoryStatus
WriteConsoleOutputCharacterA
EnumSystemLocalesA
GetComputerNameA
VerifyVersionInfoW
CreateFileW
GetConsoleAliasesLengthA
LoadLibraryW
GetStringTypeW
LCMapStringW
HeapReAlloc
HeapFree
GetCommandLineW
HeapSetInformation
GetStartupInfoW
IsProcessorFeaturePresent
EncodePointer
LeaveCriticalSection
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
SetUnhandledExceptionFilter
IsDebuggerPresent
DecodePointer
TerminateProcess
SetFilePointer
HeapAlloc
HeapCreate
ReadFile
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
CloseHandle
GetModuleHandleW
ExitProcess
FreeEnvironmentStringsW
GetEnvironmentStringsW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
Sleep
RtlUnwind
SetStdHandle
FlushFileBuffers
MultiByteToWideChar
RaiseException
HeapSize
user32
ClientToScreen
gdi32
GetTextExtentExPointW
winhttp
WinHttpReadData
WinHttpCloseHandle
Sections
.text Size: 235KB - Virtual size: 235KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.givur Size: 512B - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.barohi Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.weyar Size: 1024B - Virtual size: 624B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.mewun Size: 512B - Virtual size: 23B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.kob Size: 1024B - Virtual size: 963B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 81KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ