C:\Jenkins\AE\build-work\Hibun-AE\_Current\Client\Release\sxdmkslj.pdb
Static task
static1
Behavioral task
behavioral1
Sample
eec6a49fdec14d87dd1bcc8faf133faf5c7f49c65c6fb9893806b9a9e8cf9384.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
eec6a49fdec14d87dd1bcc8faf133faf5c7f49c65c6fb9893806b9a9e8cf9384.exe
Resource
win10v2004-20240802-en
General
-
Target
eec6a49fdec14d87dd1bcc8faf133faf5c7f49c65c6fb9893806b9a9e8cf9384
-
Size
3.6MB
-
MD5
4261914fc784b91c785474ec62933ade
-
SHA1
8bfba52008d5c610a530666ce3d6a84c66b01ec9
-
SHA256
eec6a49fdec14d87dd1bcc8faf133faf5c7f49c65c6fb9893806b9a9e8cf9384
-
SHA512
b0e9ae3a3320af4cfef54bcfb9c4c5e33af5fc73fa592ab07c29077ddb7c001500cfc2a0cf2c64798f0ceb78aa775a05e8069759251183ebb85be48272862d8b
-
SSDEEP
98304:757tlWoMibFGhFD1fGaqKWHOVZFKHYLpsXwbT9dNaXSARbgn8t:kqFGhj+zKIO9aJXwVdNaiIbg8t
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eec6a49fdec14d87dd1bcc8faf133faf5c7f49c65c6fb9893806b9a9e8cf9384
Files
-
eec6a49fdec14d87dd1bcc8faf133faf5c7f49c65c6fb9893806b9a9e8cf9384.exe windows:6 windows x86 arch:x86
f8c0ed219c99a265b4875f40ba815d37
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
LoadLibraryW
GetProcAddress
FreeLibrary
CreateDirectoryW
GetVolumeInformationW
CompareFileTime
FindFirstFileW
HeapFree
lstrlenW
lstrcpynW
GetDiskFreeSpaceW
RemoveDirectoryW
SetFileTime
GetModuleFileNameW
SetErrorMode
GetTempPathW
CreateMutexW
lstrlenA
FindClose
CreateFileW
GetVersionExW
GetSystemDirectoryW
lstrcatA
MultiByteToWideChar
GetFileInformationByHandle
LocalFileTimeToFileTime
GetLastError
OutputDebugStringW
FileTimeToSystemTime
lstrcpyA
CloseHandle
HeapAlloc
FileTimeToLocalFileTime
GetLocalTime
GetCurrentDirectoryW
GetWindowsDirectoryW
GetCurrentProcessId
GetProcessHeap
SystemTimeToFileTime
CreateProcessW
GetModuleHandleW
WideCharToMultiByte
lstrcpyW
GetTempFileNameW
DosDateTimeToFileTime
GetTickCount
lstrcmpW
MulDiv
MoveFileW
GetDriveTypeW
SetLastError
LoadLibraryExW
Sleep
GlobalAlloc
GlobalFree
GetCommandLineW
FindNextFileW
GetShortPathNameW
GetPrivateProfileSectionW
GetFileAttributesW
SetFileAttributesW
DeleteFileW
MoveFileExW
WritePrivateProfileSectionW
ReadFile
WritePrivateProfileStringW
WriteFile
WriteConsoleW
HeapSize
RaiseException
GetSystemInfo
VirtualProtect
VirtualQuery
LoadLibraryExA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwind
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
EncodePointer
GetFileAttributesExW
GetFileType
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
GetConsoleMode
ReadConsoleW
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
GetConsoleOutputCP
SetFilePointerEx
FindFirstFileExW
TzSpecificLocalTimeToSystemTime
GetStdHandle
ExitProcess
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
SetStdHandle
SetEndOfFile
GetFullPathNameW
GetFileSizeEx
GetTimeZoneInformation
GetCPInfo
GetStringTypeW
IsValidCodePage
GetACP
GetOEMCP
HeapReAlloc
FlushFileBuffers
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
DecodePointer
Exports
Exports
hdata
Sections
.text Size: 146KB - Virtual size: 145KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.hdata Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 53KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 85KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ