C:\zujalagoneze\cehacoj-73\misimonibe52\tuwonu\vekifutenu.pdb
Static task
static1
Behavioral task
behavioral1
Sample
52b51c4a1a8b8dcb71315deaad9ccadccce0b51e160e2b35c162487c09ef90f8.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
52b51c4a1a8b8dcb71315deaad9ccadccce0b51e160e2b35c162487c09ef90f8.exe
Resource
win10v2004-20240709-en
General
-
Target
8b64c3a24f2745a725bbf8d9f3dbff78.bin
-
Size
264KB
-
MD5
31a9c286efae33162f77841ea4b7df92
-
SHA1
a3f47313b98d5c76bdab8bb0b13e0cdf051618c4
-
SHA256
f17751c0e6312db1eff30d21425d88a767cab35006680fc803f7574fa8d6af17
-
SHA512
9e839de14f60c66e96ac8f4086dda563fba3da11f8b7fb20fc8e662541660f64cccbc208d8247bc27442fe1543164f977996df534de195a40e5aa6ae1e1900bb
-
SSDEEP
6144:JSgWy5kpmywHxdNV37GO2hrXscar14SYm+vfmQQb:JSgWCywRBrj2hC1lGfQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/52b51c4a1a8b8dcb71315deaad9ccadccce0b51e160e2b35c162487c09ef90f8.exe
Files
-
8b64c3a24f2745a725bbf8d9f3dbff78.bin.zip
Password: infected
-
52b51c4a1a8b8dcb71315deaad9ccadccce0b51e160e2b35c162487c09ef90f8.exe.exe windows:5 windows x86 arch:x86
Password: infected
e8b02652dda4770f34817322f629975c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
LoadLibraryA
CreateMutexW
SetLocaleInfoW
FindNextVolumeW
GetNamedPipeHandleStateA
LocalFileTimeToFileTime
EnumResourceTypesW
EnumResourceNamesA
FillConsoleOutputCharacterA
CreateTimerQueueTimer
TerminateProcess
SetEvent
FindNextFileW
GetCompressedFileSizeA
CopyFileExW
BuildCommDCBA
VerifyVersionInfoA
FreeResource
SetLastError
GetVersionExA
ReadConsoleOutputCharacterA
SetDefaultCommConfigW
VerLanguageNameW
GetCommConfig
WritePrivateProfileStructW
LocalFree
CreateTimerQueue
FindNextVolumeMountPointA
GetWriteWatch
WriteConsoleInputW
LoadResource
AddAtomW
InitAtomTable
GetThreadPriority
CallNamedPipeW
GetDriveTypeW
BuildCommDCBAndTimeoutsA
VirtualProtect
GlobalAlloc
GetVersionExW
GlobalFix
InterlockedExchange
FindFirstChangeNotificationW
SearchPathW
FormatMessageW
SetDllDirectoryW
GetModuleHandleW
WritePrivateProfileStringA
GetUserDefaultLCID
TerminateThread
GlobalUnfix
SetConsoleWindowInfo
InterlockedDecrement
GetStartupInfoA
GetSystemWow64DirectoryW
CopyFileA
GetPrivateProfileIntA
SetCalendarInfoW
DebugBreak
SetConsoleCursorInfo
FreeLibraryAndExitThread
GetModuleFileNameA
SetConsoleScreenBufferSize
WaitForDebugEvent
InterlockedExchangeAdd
GetOEMCP
GetPrivateProfileStringW
CreateActCtxA
ReadConsoleInputW
OutputDebugStringW
SetThreadAffinityMask
FlushConsoleInputBuffer
lstrlenA
LoadLibraryW
WriteConsoleW
OpenMutexW
GetThreadContext
TryEnterCriticalSection
QueryDepthSList
ConvertFiberToThread
SetProcessPriorityBoost
LockFile
FreeEnvironmentStringsA
GetConsoleCP
CreateIoCompletionPort
AllocConsole
GlobalGetAtomNameW
SetComputerNameA
GetConsoleAliasExesLengthA
CreateMailslotW
GetCommState
GetPrivateProfileIntW
MoveFileWithProgressA
GetSystemTimeAdjustment
EnumSystemLocalesA
GetModuleHandleA
GetLastError
WriteProfileStringA
OpenMutexA
OpenWaitableTimerW
OpenFileMappingW
GetFileSizeEx
GetConsoleAliasesLengthW
SetProcessShutdownParameters
FillConsoleOutputCharacterW
WriteConsoleOutputCharacterA
GetDateFormatW
BuildCommDCBAndTimeoutsW
GetConsoleAliasExesA
GetBinaryTypeW
Sleep
InterlockedIncrement
GetProcAddress
ExitProcess
MoveFileA
DeleteFileA
RaiseException
GetStartupInfoW
HeapValidate
IsBadReadPtr
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameW
TlsGetValue
TlsAlloc
TlsSetValue
GetCurrentThreadId
TlsFree
WriteFile
GetStdHandle
GetACP
GetCPInfo
IsValidCodePage
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
HeapDestroy
HeapCreate
HeapFree
VirtualFree
HeapAlloc
HeapSize
HeapReAlloc
VirtualAlloc
RtlUnwind
OutputDebugStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetFilePointer
GetConsoleMode
FlushFileBuffers
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
CloseHandle
CreateFileA
user32
CharUpperW
Sections
.text Size: 148KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 173KB - Virtual size: 336KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
�����u� Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE