C:\koza59_gadoh-zuva\daka-nonewuvo\77 conilab.pdb
Static task
static1
Behavioral task
behavioral1
Sample
3319bf14669d89a921dd29bdc4ba88df47e41a6e5fd58c2fa6e00cd01e935ffe.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3319bf14669d89a921dd29bdc4ba88df47e41a6e5fd58c2fa6e00cd01e935ffe.exe
Resource
win10v2004-20240802-en
General
-
Target
3319bf14669d89a921dd29bdc4ba88df47e41a6e5fd58c2fa6e00cd01e935ffe
-
Size
4.5MB
-
MD5
c8d904e8b9bcdff50072f716da4689ba
-
SHA1
9d13f1667ec065188dd92082efa3427d5ade85ee
-
SHA256
3319bf14669d89a921dd29bdc4ba88df47e41a6e5fd58c2fa6e00cd01e935ffe
-
SHA512
b3bf4bb6ae4cce5e073005058d2e87f91f113a93b50700765a0858aed21e424543342061235bbcfde9692137153e71f3a1eaa8bc7df3861a2da365c6e4edabc5
-
SSDEEP
98304:E7KyqAxjvnZDgnWvJZAntdigmqBS+5iphMZhi9305ttwac:E9qyjvdgW8daL+5CwhL5oac
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 3319bf14669d89a921dd29bdc4ba88df47e41a6e5fd58c2fa6e00cd01e935ffe
Files
-
3319bf14669d89a921dd29bdc4ba88df47e41a6e5fd58c2fa6e00cd01e935ffe.exe windows:5 windows x86 arch:x86
b678a05c216e0e78b385602dd31274de
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetComputerNameA
WriteConsoleInputW
WritePrivateProfileStructA
GetConsoleAliasesLengthW
CopyFileExW
TlsGetValue
CommConfigDialogA
GetDefaultCommConfigW
FindResourceExW
GetProcessIoCounters
MapUserPhysicalPages
FreeLibrary
CallNamedPipeA
GetCommState
InterlockedDecrement
ZombifyActCtx
ScrollConsoleScreenBufferW
GetSystemWindowsDirectoryW
GetNamedPipeHandleStateA
GlobalLock
SetComputerNameW
CreateDirectoryExA
GetModuleHandleW
CreateNamedPipeW
GetPrivateProfileStringW
WriteFileGather
SetProcessPriorityBoost
GetSystemDirectoryW
LoadLibraryW
GetConsoleMode
SetCommConfig
SizeofResource
GetSystemWow64DirectoryW
GetSystemTimeAdjustment
InterlockedPopEntrySList
GlobalFlags
SetConsoleCursorPosition
GetBinaryTypeA
IsDBCSLeadByte
ReadFile
GetBinaryTypeW
GetOverlappedResult
CompareStringW
ExitThread
lstrlenW
GetStartupInfoW
LCMapStringA
VerifyVersionInfoW
CreateDirectoryA
GetProfileIntA
GetFileSizeEx
SetCurrentDirectoryA
SetThreadLocale
GetCPInfoExW
OpenMutexW
GetCurrentDirectoryW
ReadConsoleOutputCharacterA
GetProcessHeaps
SetVolumeLabelW
WriteProfileSectionA
SetStdHandle
SearchPathA
GetLocalTime
GetAtomNameA
LoadLibraryA
LocalAlloc
SetCalendarInfoW
SetConsoleCtrlHandler
SetConsoleWindowInfo
GetTapeParameters
WTSGetActiveConsoleSessionId
SetConsoleTitleW
GetProcessShutdownParameters
CreateMutexA
FreeEnvironmentStringsW
RequestWakeupLatency
VirtualProtect
GetConsoleCursorInfo
GetCPInfoExA
GetVersionExA
FindAtomW
GetWindowsDirectoryW
GetVersion
GetVolumeNameForVolumeMountPointW
DeleteFileW
FindActCtxSectionStringW
GetProfileSectionW
CommConfigDialogW
InterlockedIncrement
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleFileNameW
GetCommandLineA
GetStartupInfoA
HeapValidate
IsBadReadPtr
RaiseException
RtlUnwind
GetLastError
GetFileType
WriteFile
WideCharToMultiByte
GetConsoleCP
GetProcAddress
TlsAlloc
TlsSetValue
GetCurrentThreadId
TlsFree
SetLastError
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
DebugBreak
GetStdHandle
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
ExitProcess
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
HeapDestroy
HeapCreate
HeapFree
VirtualFree
FlushFileBuffers
HeapAlloc
HeapSize
HeapReAlloc
VirtualAlloc
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
WriteConsoleA
GetConsoleOutputCP
SetFilePointer
LCMapStringW
GetModuleHandleA
CreateFileA
CloseHandle
user32
GetMessageTime
GetCursorInfo
Exports
Exports
_hockey@4
_hyppo@4
Sections
.text Size: 4.4MB - Virtual size: 4.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 4.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ