C:\xewut45\teceheligehe-tufo\ney.pdb
Static task
static1
Behavioral task
behavioral1
Sample
8758ee03fb6ff2df8312e22fcf9dbb20N.exe
Resource
win7-20240708-en
General
-
Target
8758ee03fb6ff2df8312e22fcf9dbb20N.exe
-
Size
399KB
-
MD5
8758ee03fb6ff2df8312e22fcf9dbb20
-
SHA1
877b4c9e2fc29553c188b840d3dd6cc2d8189190
-
SHA256
0632b39a043f4efb1bdddb7861c7b8bbe58853ed09638ae35169db589e98fd1c
-
SHA512
fad746dab3ca24e031456a8ebf66fa86c72f2cf30043841ed779512d34f4653b3a5e4ce9a651d556837876ebc4c87add03c5e95e70f0e6e2c20d71ef8fc81383
-
SSDEEP
6144:+qdyOiyn3mtA6XWJ0STiUdViA1k+SkCvUJPhdHuag/JP4D2FYkpv:fdyOiynWtzWJfOXA12oTHI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8758ee03fb6ff2df8312e22fcf9dbb20N.exe
Files
-
8758ee03fb6ff2df8312e22fcf9dbb20N.exe.exe windows:5 windows x86 arch:x86
cdba31eb15eac28b6bd8bfecbb97f747
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
PulseEvent
FillConsoleOutputCharacterA
GetPrivateProfileSectionNamesW
SetVolumeLabelA
GetFileSize
WriteConsoleInputW
lstrlenA
GetConsoleAliasesLengthW
TlsGetValue
CommConfigDialogA
SetEndOfFile
FindResourceExW
FreeLibrary
LoadResource
ScrollConsoleScreenBufferW
WritePrivateProfileSectionA
GlobalSize
CreateJobObjectW
GetProfileStringW
WaitForSingleObject
SignalObjectAndWait
SetComputerNameW
OpenSemaphoreA
CallNamedPipeW
GetProcessPriorityBoost
GetTickCount
EnumTimeFormatsW
GetDriveTypeA
GlobalAlloc
GetConsoleMode
TerminateThread
SetVolumeMountPointA
GetVersionExW
SetConsoleCursorPosition
GetFileAttributesW
SetTimeZoneInformation
VerifyVersionInfoA
SetSystemPowerState
ReadFile
CompareStringW
SetThreadPriority
DeactivateActCtx
InterlockedExchange
ReleaseActCtx
GetStdHandle
OpenMutexW
FindFirstFileExA
GetLastError
SetLastError
ReadConsoleOutputCharacterA
GetProcAddress
VirtualAlloc
MoveFileW
SetStdHandle
SetComputerNameA
GetPrivateProfileStringA
LoadLibraryA
WriteConsoleA
OpenWaitableTimerW
LocalAlloc
DeleteTimerQueue
IsSystemResumeAutomatic
WriteProfileSectionW
AddAtomA
FindAtomA
GetPrivateProfileStructA
WaitForMultipleObjects
WTSGetActiveConsoleSessionId
GetThreadPriority
DebugSetProcessKillOnExit
GetModuleHandleA
EnumResourceNamesA
GetStringTypeW
WaitForDebugEvent
GetCurrentThreadId
DuplicateHandle
SetProcessShutdownParameters
LocalSize
AddConsoleAliasA
DebugBreak
FindActCtxSectionStringW
GetProfileSectionW
AreFileApisANSI
GetVolumeInformationW
CloseHandle
CreateFileW
GetCommandLineW
HeapSetInformation
GetStartupInfoW
EncodePointer
DecodePointer
IsProcessorFeaturePresent
HeapValidate
IsBadReadPtr
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InterlockedIncrement
InterlockedDecrement
GetModuleHandleW
ExitProcess
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
TlsAlloc
TlsSetValue
TlsFree
HeapCreate
WriteFile
RaiseException
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetModuleFileNameA
HeapReAlloc
HeapSize
HeapQueryInformation
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
HeapFree
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
LoadLibraryW
RtlUnwind
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
WideCharToMultiByte
LCMapStringW
MultiByteToWideChar
SetFilePointer
GetConsoleCP
FlushFileBuffers
user32
GetMessageTime
GetCursorInfo
Exports
Exports
_go@4
_hockey@4
_regulmoto@4
Sections
.text Size: 127KB - Virtual size: 127KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 156KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 70KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ