C:\nojuxelunucuhedixat22 xi.pdb
Static task
static1
Behavioral task
behavioral1
Sample
f913881084275fdf37d38f6f06f1f9a5261bac9445fd372bed0c3fdefd346321.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
f913881084275fdf37d38f6f06f1f9a5261bac9445fd372bed0c3fdefd346321.exe
Resource
win10v2004-20240802-en
General
-
Target
f913881084275fdf37d38f6f06f1f9a5261bac9445fd372bed0c3fdefd346321
-
Size
202KB
-
MD5
1bd596b82beeb72ce67b7c528644f1c5
-
SHA1
aa30ecd4ae8f4905247c7c2adcf0000154408cd6
-
SHA256
f913881084275fdf37d38f6f06f1f9a5261bac9445fd372bed0c3fdefd346321
-
SHA512
fd867293f700bfd50547be13389b69ac1c1464bd88e564f2180206c00c6a0280a3737d01d9158ef03174edaab9ea20b408deb2aad611ce96655c1517340e83c2
-
SSDEEP
3072:riOG+sRZLZwGINvRwYMczT+gE3sY5PDFvp7d57d7zS10mdGh4:ruRZL7yvRwoTjE3DZH57dfNmdR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f913881084275fdf37d38f6f06f1f9a5261bac9445fd372bed0c3fdefd346321
Files
-
f913881084275fdf37d38f6f06f1f9a5261bac9445fd372bed0c3fdefd346321.exe windows:5 windows x86 arch:x86
7eec602028abbb0bc0db601f80320267
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
WriteConsoleInputW
lstrlenA
TlsGetValue
SetLocalTime
GetDefaultCommConfigW
BuildCommDCBAndTimeoutsA
FreeLibrary
CallNamedPipeA
SetWaitableTimer
SetUnhandledExceptionFilter
LoadLibraryExW
ZombifyActCtx
GlobalSize
SetEnvironmentVariableW
CreateJobObjectW
HeapFree
SetHandleInformation
GetProfileSectionA
ConnectNamedPipe
GetProcessPriorityBoost
CreateNamedPipeW
VirtualFree
EnumTimeFormatsW
TzSpecificLocalTimeToSystemTime
GetPriorityClass
GetVolumeInformationA
GetConsoleMode
GetSystemPowerStatus
SizeofResource
SetVolumeMountPointA
GlobalMemoryStatus
DeleteVolumeMountPointW
LeaveCriticalSection
SetConsoleCursorPosition
GetFileAttributesW
SetTimeZoneInformation
VerifyVersionInfoA
TerminateProcess
ReadFile
GetBinaryTypeW
DeactivateActCtx
GetLastError
SetComputerNameA
GetLocalTime
LoadLibraryA
OpenMutexA
LocalAlloc
MoveFileA
GetCommMask
GetOEMCP
DebugSetProcessKillOnExit
CreateIoCompletionPort
CreateMutexA
VirtualProtect
GetCurrentDirectoryA
GetSystemTime
GetConsoleSelectionInfo
lstrcpyA
GetVersionExW
GetCommandLineW
DeleteFileA
HeapReAlloc
HeapAlloc
GetStartupInfoW
RaiseException
RtlUnwind
EnterCriticalSection
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
VirtualAlloc
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
IsValidCodePage
MultiByteToWideChar
HeapSize
WideCharToMultiByte
GetConsoleCP
FlushFileBuffers
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
CloseHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetFilePointer
SetStdHandle
CreateFileA
GetModuleHandleA
user32
GetAncestor
GetWindowInfo
advapi32
RevertToSelf
Exports
Exports
_go@4
_kir@8
Sections
.text Size: 78KB - Virtual size: 77KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 53KB - Virtual size: 39.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 55KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ