seppuku.pdb
Static task
static1
1 signatures
General
-
Target
seppuku.exe
-
Size
366KB
-
MD5
512e21078a412ee5ad1071c7b3eee979
-
SHA1
e370812f19ee00f89885ce4c084847e239eeb118
-
SHA256
7ea3c9d7a0b69c8c820faeda928462d2f777c02ceb5bbf80a222c582f1460420
-
SHA512
531116ccf830109e7eff5423304f11e61baf23adaf1141619810e5cdc39355e3f443bb8b9141f5ee616e870385a51c35dcbb83308a1c9b051daa041e5a518663
-
SSDEEP
6144:DRfVj5/L5ApSa+/daVME6Gc2tpp48LaT5Ks:DRfVVG4a1VCOtSN
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource seppuku.exe
Files
-
seppuku.exe.exe windows:6 windows x64 arch:x64
cba7929edec820c4aabe73f8c309d56e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
api-ms-win-core-synch-l1-2-0
WaitOnAddress
WakeByAddressAll
WakeByAddressSingle
netapi32
NetGetJoinInformation
ole32
CoTaskMemFree
kernel32
GetLastError
UnhandledExceptionFilter
FormatMessageW
HeapFree
HeapAlloc
AddVectoredExceptionHandler
SetThreadStackGuarantee
GetCurrentThread
GetProcessHeap
QueryPerformanceCounter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetLastError
GetCurrentDirectoryW
GetEnvironmentVariableW
GetCurrentThreadId
SetFileInformationByHandle
GetCurrentProcess
GetSystemTimeAsFileTime
InitializeSListHead
WaitForSingleObject
IsDebuggerPresent
GetProcAddress
CloseHandle
GetFileInformationByHandle
GetCurrentProcessId
GetConsoleMode
GetStdHandle
SetUnhandledExceptionFilter
HeapReAlloc
lstrlenW
ReleaseMutex
FindNextFileW
FindClose
CreateFileW
GetFileInformationByHandleEx
FindFirstFileW
GetFileType
CreateMutexA
LoadLibraryA
WaitForSingleObjectEx
GetModuleHandleW
MultiByteToWideChar
WriteConsoleW
WideCharToMultiByte
ReadConsoleW
GetFullPathNameW
GetModuleHandleA
IsProcessorFeaturePresent
ntdll
RtlNtStatusToDosError
NtReadFile
NtWriteFile
vcruntime140
memmove
__current_exception
__CxxFrameHandler3
__C_specific_handler
memcpy
memcmp
memset
_CxxThrowException
__current_exception_context
api-ms-win-crt-heap-l1-1-0
free
_set_new_mode
api-ms-win-crt-string-l1-1-0
wcslen
api-ms-win-crt-runtime-l1-1-0
_initialize_narrow_environment
_configure_narrow_argv
_set_app_type
_get_initial_narrow_environment
_initterm
_exit
__p___argc
_initterm_e
terminate
_crt_atexit
exit
_register_onexit_function
_initialize_onexit_table
__p___argv
_seh_filter_exe
_register_thread_local_exe_atexit_callback
_c_exit
_cexit
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-stdio-l1-1-0
_set_fmode
__p__commode
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Sections
.text Size: 266KB - Virtual size: 265KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 79KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 840B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ