C:\yavojovoxulu_84-yudezana56\gazawilitavaxa26\pe.pdb
Static task
static1
Behavioral task
behavioral1
Sample
5cd2f318a2bce79cba0d8aa27132deebf1bacacbf2caf6069ef614968908f0e0.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
5cd2f318a2bce79cba0d8aa27132deebf1bacacbf2caf6069ef614968908f0e0.exe
Resource
win10v2004-20241007-en
General
-
Target
5cd2f318a2bce79cba0d8aa27132deebf1bacacbf2caf6069ef614968908f0e0
-
Size
274KB
-
MD5
0d19cf373b97756234115e0cf2a603c6
-
SHA1
0c3e03caa24f647308fdec78d55a2a805279488d
-
SHA256
5cd2f318a2bce79cba0d8aa27132deebf1bacacbf2caf6069ef614968908f0e0
-
SHA512
c7b7661e3b36b051b1b08c30ee8344f3f8675b2095da20485a261a49dd791c01bb2337a84a4e1693299c291568d7d736dd386cb1579a7cd013ad520569cfa7d9
-
SSDEEP
6144:3OzLoJazKULP9wHZZNQHnjSGWLSioSEIYR/mJekTfj4B:ezUJa3p0NQHGSwNYR+BTc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5cd2f318a2bce79cba0d8aa27132deebf1bacacbf2caf6069ef614968908f0e0
Files
-
5cd2f318a2bce79cba0d8aa27132deebf1bacacbf2caf6069ef614968908f0e0.exe windows:5 windows x86 arch:x86
a0b1048f3a07759681a1521f3786b4a1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
SetDefaultCommConfigA
HeapCompact
WriteConsoleInputW
GetLocaleInfoA
GetStringTypeA
FindResourceExW
WaitForSingleObject
SetVolumeMountPointW
GetConsoleAliasesA
GlobalAlloc
SwitchToFiber
GetProcessHandleCount
GetConsoleAliasW
TerminateProcess
FileTimeToSystemTime
ReplaceFileA
DeactivateActCtx
GetLastError
GetProcAddress
VirtualAlloc
GetComputerNameExW
WriteConsoleA
GetModuleHandleA
GetConsoleTitleW
GetVersionExA
ResetWriteWatch
EnumCalendarInfoExA
HeapAlloc
MultiByteToWideChar
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GetCurrentProcess
IsDebuggerPresent
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapFree
VirtualFree
HeapReAlloc
HeapCreate
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
RtlUnwind
LoadLibraryA
LCMapStringA
WideCharToMultiByte
LCMapStringW
GetStringTypeW
RaiseException
HeapSize
winhttp
WinHttpQueryOption
Sections
.text Size: 215KB - Virtual size: 214KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 3.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jikayu Size: 1024B - Virtual size: 626B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ