C:\zodigakisur\66-gabitok\tuxozitej\wa.pdb
Static task
static1
Behavioral task
behavioral1
Sample
artifact.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
artifact.exe
Resource
win10v2004-20240802-en
General
-
Target
artifact.bin
-
Size
12.5MB
-
MD5
412b77d817e242ec4cf2f5e1f319d301
-
SHA1
e5b8e55949b33a4f85057a392c86489a7a5d3497
-
SHA256
bda0e8f7a8383b0026382daad8c123dc726a35c07810ea8dea97b30e969a816d
-
SHA512
6b92e0f2f3b951cee55ebf5625ff8579c3f92c257c7882039e38c5019ead7f84ed792d97a78fe133fbe582eb070c5ddd00fbfce430f46dd422fdde738adae244
-
SSDEEP
3072:3BNmmPQhjS0HB3IdC3SXgqvfzzP+rTMGU5H8AH2RRRRRRRRRRRRRRRRRRRRRRRRP:R1PQh3HB4dCCXgQfwoF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource artifact.bin
Files
-
artifact.bin.exe windows:5 windows x86 arch:x86
249389cf3ddc95dbd917b52599185344
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetUserDefaultLCID
ZombifyActCtx
GetCPInfoExA
WriteConsoleInputA
ReadConsoleInputA
SetTapeParameters
SetTapePosition
WriteTapemark
GetConsoleAliasesA
WriteConsoleW
SetLastError
BuildCommDCBW
WriteProfileSectionW
RequestDeviceWakeup
LoadLibraryA
FlushFileBuffers
GetLongPathNameA
PulseEvent
AllocConsole
ProcessIdToSessionId
ReleaseActCtx
GetProcessHeap
BuildCommDCBAndTimeoutsW
GetGeoInfoW
VirtualProtect
GetProcAddress
GetModuleHandleW
HeapUnlock
GetProcessHeaps
GetOEMCP
WaitForMultipleObjectsEx
WaitForSingleObject
SetSystemPowerState
FindAtomW
CreateJobObjectW
OpenWaitableTimerW
HeapValidate
WideCharToMultiByte
ReadConsoleW
GetConsoleAliasesLengthA
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
GetLastError
SetFilePointer
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
Sleep
HeapSize
ExitProcess
ReadFile
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
WriteFile
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
IsValidCodePage
SetStdHandle
GetConsoleCP
GetConsoleMode
RtlUnwind
VirtualAlloc
HeapReAlloc
MultiByteToWideChar
InitializeCriticalSectionAndSpinCount
RaiseException
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
CreateFileA
CloseHandle
advapi32
AreAnyAccessesGranted
Sections
.text Size: 127KB - Virtual size: 127KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 19KB - Virtual size: 39.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 12.4MB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ