C:\fudujutalexu-kedeb\79\vuleyoz_vulovey 80-tulufa44\p.pdb
Static task
static1
Behavioral task
behavioral1
Sample
07e7dd3b968a15e42c67a728a9d143533d66af00ab9003961086c8c2ee3670f2.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
07e7dd3b968a15e42c67a728a9d143533d66af00ab9003961086c8c2ee3670f2.exe
Resource
win10v2004-20240709-en
General
-
Target
07e7dd3b968a15e42c67a728a9d143533d66af00ab9003961086c8c2ee3670f2.exe
-
Size
793KB
-
MD5
4bf68315a0694544cfc078002c44d8fe
-
SHA1
19c4a3e641c8fff8cb15b2468c01cb1cec2eafbc
-
SHA256
07e7dd3b968a15e42c67a728a9d143533d66af00ab9003961086c8c2ee3670f2
-
SHA512
e6ba20389ef3ee6fba7ba6d5cbe6c371933fa91a6c7c529de8dcaed89201f734a7d3e7bf3b7bdd0599327fa539db56a90134a813c5f98be3fc2cb7ed3680f0b2
-
SSDEEP
12288:ILN0eHFcbKfY/cFQJSaxlY4jFwmkMTq52qRwUrWcCSX8mXtOuQmFJ29:9eFq+nGJZxlY4jqTMngnWcCSM8lQmq9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07e7dd3b968a15e42c67a728a9d143533d66af00ab9003961086c8c2ee3670f2.exe
Files
-
07e7dd3b968a15e42c67a728a9d143533d66af00ab9003961086c8c2ee3670f2.exe.exe windows:5 windows x86 arch:x86
031ab1edcbaeae0599475583a40befa9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
LoadLibraryA
CreateMutexW
SetLocaleInfoW
FindNextVolumeW
GetNamedPipeHandleStateA
LocalFileTimeToFileTime
EnumResourceTypesW
EnumResourceNamesW
FillConsoleOutputCharacterA
CreateTimerQueueTimer
TerminateProcess
SetEvent
FindNextFileA
GetCompressedFileSizeA
CopyFileExW
BuildCommDCBW
VerifyVersionInfoA
FreeResource
SetLastError
GetVersionExA
ReadConsoleOutputCharacterA
SetDefaultCommConfigW
VerLanguageNameW
GetCommConfig
WritePrivateProfileStructW
LocalFree
CreateTimerQueue
FindNextVolumeMountPointA
ResetWriteWatch
WriteConsoleInputA
LoadResource
AddAtomW
InitAtomTable
GetThreadPriority
CallNamedPipeA
GetDriveTypeW
BuildCommDCBAndTimeoutsA
VirtualProtect
LoadLibraryW
GlobalAlloc
VerifyVersionInfoW
InterlockedExchange
FindFirstChangeNotificationW
SearchPathW
FormatMessageW
SetDllDirectoryW
GetModuleHandleA
WritePrivateProfileStringA
GetUserDefaultLCID
TerminateThread
GlobalUnfix
GetStartupInfoW
GetSystemWow64DirectoryW
CopyFileA
GetPrivateProfileIntA
GetLastError
SetConsoleCursorInfo
SetCalendarInfoW
DebugBreak
FreeLibraryAndExitThread
GetModuleFileNameA
SetConsoleScreenBufferSize
WaitForDebugEvent
InterlockedExchangeAdd
GetOEMCP
GetPrivateProfileStringW
CreateActCtxA
GetPrivateProfileIntW
ReadConsoleInputW
OutputDebugStringW
lstrlenA
WriteConsoleW
OpenMutexW
GetThreadContext
DeleteCriticalSection
ConvertFiberToThread
SetProcessPriorityBoost
LockFile
FreeEnvironmentStringsA
GetConsoleCP
CreateIoCompletionPort
AllocConsole
GlobalGetAtomNameW
SetComputerNameA
GetConsoleAliasExesLengthA
CreateMailslotW
GetCommState
MoveFileWithProgressW
GetSystemTimeAdjustment
EnumSystemLocalesA
lstrcatW
OpenWaitableTimerW
OpenFileMappingW
GetFileSizeEx
GetConsoleAliasesLengthW
SetProcessShutdownParameters
FillConsoleOutputCharacterW
WriteConsoleOutputCharacterA
GetConsoleAliasExesA
GetBinaryTypeW
GetNumberFormatA
BuildCommDCBAndTimeoutsW
GetModuleHandleW
Sleep
InterlockedIncrement
InterlockedDecrement
GetProcAddress
ExitProcess
MoveFileA
DeleteFileA
RaiseException
HeapValidate
IsBadReadPtr
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameW
TlsGetValue
TlsAlloc
TlsSetValue
GetCurrentThreadId
TlsFree
WriteFile
GetStdHandle
GetACP
GetCPInfo
IsValidCodePage
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
HeapDestroy
HeapCreate
HeapFree
VirtualFree
HeapAlloc
HeapSize
HeapReAlloc
VirtualAlloc
RtlUnwind
OutputDebugStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetFilePointer
GetConsoleMode
FlushFileBuffers
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
CloseHandle
CreateFileA
user32
CharUpperW
Sections
.text Size: 148KB - Virtual size: 147KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 589KB - Virtual size: 752KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
��t��u Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE