rust.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2b13e765b9385e1bd5b1cc97ac0cf9463100ddc19573847084a6d55651fdc799.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2b13e765b9385e1bd5b1cc97ac0cf9463100ddc19573847084a6d55651fdc799.exe
Resource
win10v2004-20240802-en
General
-
Target
2b13e765b9385e1bd5b1cc97ac0cf9463100ddc19573847084a6d55651fdc799
-
Size
949KB
-
MD5
e77a6e820e6a2f34f84804a014c281c6
-
SHA1
e09dca7baaf7e965b9f9799a81af206d95545a16
-
SHA256
2b13e765b9385e1bd5b1cc97ac0cf9463100ddc19573847084a6d55651fdc799
-
SHA512
b83423a94e757bdd729dd587a9c03287c3e853df545a470fe3f4553860ee64694bfdbe5b3ae8f9f8cca7d12ab3c76e94b3d964bafe6de3aea7bc6720f2358db3
-
SSDEEP
24576:DG/bxgwiF1gXj4Zx9xtEo+T/OPxo6ebJ4G1b:DG/bxgwiF1gXj4Zx9xWo+T/2xo6EJ4o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b13e765b9385e1bd5b1cc97ac0cf9463100ddc19573847084a6d55651fdc799
Files
-
2b13e765b9385e1bd5b1cc97ac0cf9463100ddc19573847084a6d55651fdc799.exe windows:6 windows x64 arch:x64
3b05aea7767f62cb62c4e01095116931
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
api-ms-win-core-synch-l1-2-0
WakeByAddressSingle
WakeByAddressAll
WaitOnAddress
kernel32
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
InitializeSListHead
GetConsoleWindow
VirtualAlloc
GetCurrentProcess
FlushInstructionCache
CloseHandle
GetLastError
AddVectoredExceptionHandler
SetThreadStackGuarantee
GetCurrentThread
WaitForSingleObject
QueryPerformanceCounter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetLastError
GetCurrentDirectoryW
GetEnvironmentVariableW
GetStdHandle
GetCurrentProcessId
HeapFree
HeapReAlloc
lstrlenW
ReleaseMutex
GetProcessHeap
HeapAlloc
GetConsoleMode
GetModuleHandleW
MultiByteToWideChar
WriteConsoleW
WideCharToMultiByte
IsProcessorFeaturePresent
GetModuleHandleA
GetProcAddress
WaitForSingleObjectEx
LoadLibraryA
CreateMutexA
GetSystemTimeAsFileTime
GetCurrentThreadId
user32
ShowWindow
ntdll
NtWriteFile
RtlNtStatusToDosError
vcruntime140
__current_exception
__current_exception_context
__C_specific_handler
_CxxThrowException
memcmp
memmove
memset
memcpy
__CxxFrameHandler3
api-ms-win-crt-runtime-l1-1-0
_initterm_e
exit
_exit
_initterm
__p___argc
__p___argv
_initialize_narrow_environment
_c_exit
_register_thread_local_exe_atexit_callback
_configure_narrow_argv
_set_app_type
_seh_filter_exe
_get_initial_narrow_environment
_register_onexit_function
_crt_atexit
terminate
_cexit
_initialize_onexit_table
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-stdio-l1-1-0
__p__commode
_set_fmode
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
api-ms-win-crt-heap-l1-1-0
_set_new_mode
free
Sections
.text Size: 140KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 778KB - Virtual size: 777KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 768B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ