C:\hacoroxosedijibaf kedo.pdb
Static task
static1
Behavioral task
behavioral1
Sample
7bab09d4785a01224d05c1af6f4b3ba0N.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
7bab09d4785a01224d05c1af6f4b3ba0N.exe
Resource
win10v2004-20240802-en
General
-
Target
7bab09d4785a01224d05c1af6f4b3ba0N.exe
-
Size
709KB
-
MD5
7bab09d4785a01224d05c1af6f4b3ba0
-
SHA1
9dadd45b52753d5d7db6a9229d2b7fb45e2d94b1
-
SHA256
c7b4a91f711a6224a50e159b95288d6eee960d40714b2103f3180a174f0d1550
-
SHA512
a35756b61582a8c6ecfe40a5a0e9ba74b078eb80699c40a1c998b52e4381c20ca3932824a244fd19f70d57c13ac72560851c9fe15f91afe04f15ff0f3d9c2092
-
SSDEEP
12288:QtdsHI64kJD5pmNVYCPyDcPt6vwuZj6BYgBzDEUh6Bgk/4l+pPKJXsLi:QQ4kNyYCPyDAjHOJpPKJXsLi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7bab09d4785a01224d05c1af6f4b3ba0N.exe
Files
-
7bab09d4785a01224d05c1af6f4b3ba0N.exe.exe windows:5 windows x86 arch:x86
364a0fae4ca7ebb0df5cfdfd32c18277
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetCommandLineW
GetPrivateProfileSectionNamesW
SetVolumeLabelA
SetPriorityClass
OpenFile
WriteConsoleInputW
WritePrivateProfileStructA
GetConsoleAliasesLengthW
CopyFileExW
TlsGetValue
GetDriveTypeW
SetEndOfFile
FindResourceExW
LoadResource
HeapAlloc
SystemTimeToFileTime
GetCommState
ZombifyActCtx
ScrollConsoleScreenBufferW
WritePrivateProfileSectionA
GetProfileStringW
WaitForSingleObject
SetComputerNameW
OpenSemaphoreA
FindFirstFileExW
GetTickCount
GetWindowsDirectoryA
EnumTimeFormatsA
GetSystemWow64DirectoryA
SetProcessPriorityBoost
GlobalAlloc
GetConsoleMode
TerminateThread
GetPrivateProfileStructW
GetSystemPowerStatus
SetSystemTimeAdjustment
SetVolumeMountPointA
GlobalFlags
SetConsoleMode
GetFileAttributesW
SetTimeZoneInformation
HeapQueryInformation
TerminateProcess
GetTimeZoneInformation
GetBinaryTypeW
GetACP
lstrlenW
SetThreadPriority
RaiseException
CreateJobObjectA
GetPrivateProfileIntW
InterlockedExchange
GetStdHandle
GetLastError
IsDBCSLeadByteEx
SetLastError
ReadConsoleOutputCharacterA
GetProcAddress
SetComputerNameA
OpenWaitableTimerA
GetLocalTime
LoadLibraryA
OpenThread
OpenMutexA
WriteConsoleA
ProcessIdToSessionId
LocalAlloc
MoveFileA
BuildCommDCBAndTimeoutsW
IsSystemResumeAutomatic
SetConsoleOutputCP
AddAtomW
WriteProfileSectionW
GetCommMask
SetSystemTime
SetConsoleCursorInfo
DebugSetProcessKillOnExit
GetProcessShutdownParameters
ContinueDebugEvent
CancelTimerQueueTimer
EnumResourceNamesA
RequestWakeupLatency
VirtualProtect
GetConsoleCursorInfo
ReleaseMutex
FindAtomW
AddConsoleAliasA
DebugBreak
GetProfileSectionW
GetVolumeInformationW
lstrcpyA
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
WideCharToMultiByte
DeleteFileA
EncodePointer
DecodePointer
GetCommandLineA
HeapSetInformation
GetStartupInfoW
GetModuleFileNameW
IsProcessorFeaturePresent
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetOEMCP
GetCPInfo
IsValidCodePage
TlsAlloc
TlsSetValue
GetCurrentThreadId
TlsFree
GetModuleHandleW
InitializeCriticalSectionAndSpinCount
SetStdHandle
GetFileType
WriteFile
GetConsoleCP
HeapValidate
IsBadReadPtr
ExitProcess
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
HeapCreate
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
LoadLibraryW
RtlUnwind
LCMapStringW
MultiByteToWideChar
GetStringTypeW
SetFilePointer
HeapReAlloc
HeapSize
HeapFree
CreateFileW
CloseHandle
FlushFileBuffers
user32
GetAncestor
GetCursorInfo
Sections
.text Size: 566KB - Virtual size: 566KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 21KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kazig Size: 1024B - Virtual size: 741B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 179KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ