C:\nazogezawetuza\kuy\cunetiz\lerorexe97\wopah\56\l.pdb
Static task
static1
Behavioral task
behavioral1
Sample
9f5678a34d69cf3d5ce7caf455df17aaef1206eff0dd4ed03c613597fa42ad31.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
9f5678a34d69cf3d5ce7caf455df17aaef1206eff0dd4ed03c613597fa42ad31.exe
Resource
win10v2004-20241007-en
General
-
Target
9f5678a34d69cf3d5ce7caf455df17aaef1206eff0dd4ed03c613597fa42ad31
-
Size
337KB
-
MD5
b41f555dcdfad5f10e3de9e9f8269c1b
-
SHA1
ec396306002f5d01413cc928e8311b40a4f4fe93
-
SHA256
9f5678a34d69cf3d5ce7caf455df17aaef1206eff0dd4ed03c613597fa42ad31
-
SHA512
aa08975e5411cf8fcc91428545dd5fee87bf8d4f8c47d6a1dc451d7cb0bfedbcb35e8231ed9dab151f10cb8a88e7cf112f54a561fb5f2e6a8511e150edd64464
-
SSDEEP
6144:vZ1fxU+7jHJPyu/j9NfDgLa9aUBWqfHSbVmRWbfQoMGT4tKKtL:vZ1fSqPyOg+93BWqfyhmRsCGT4tjtL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9f5678a34d69cf3d5ce7caf455df17aaef1206eff0dd4ed03c613597fa42ad31
Files
-
9f5678a34d69cf3d5ce7caf455df17aaef1206eff0dd4ed03c613597fa42ad31.exe windows:5 windows x86 arch:x86
63780af5feecb1756d16d373fee4c209
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetModuleFileNameA
GetConsoleAliasesLengthW
OpenEventA
InterlockedDecrement
EnumCalendarInfoExW
InterlockedIncrement
WriteConsoleInputA
ReadConsoleInputA
GetSystemDirectoryA
MoveFileExW
WriteConsoleW
FreeUserPhysicalPages
BuildCommDCBW
VerifyVersionInfoW
WaitNamedPipeA
BeginUpdateResourceA
CancelTimerQueueTimer
GetCPInfoExA
GetModuleFileNameW
GetConsoleAliasExesLengthA
LoadLibraryA
MoveFileA
ReadConsoleOutputCharacterW
GlobalAlloc
GetProcAddress
CommConfigDialogA
SetFileAttributesW
AreFileApisANSI
OpenJobObjectA
LCMapStringA
GetFileAttributesA
SetConsoleTitleW
CreateHardLinkW
GetSystemDefaultLangID
GetCurrentProcessId
GetConsoleProcessList
SetLastError
GetCommMask
BuildCommDCBAndTimeoutsW
FreeLibrary
AddRefActCtx
SetFileTime
GetConsoleMode
GetDiskFreeSpaceW
GetConsoleAliasExesA
InitializeCriticalSection
SetConsoleCP
GetLastError
CloseHandle
FlushFileBuffers
LoadLibraryW
EnumTimeFormatsA
GetConsoleCP
SetStdHandle
WideCharToMultiByte
GetStringTypeW
InterlockedExchange
MultiByteToWideChar
Sleep
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
EncodePointer
DecodePointer
HeapReAlloc
HeapFree
RtlUnwind
RaiseException
GetCommandLineA
HeapSetInformation
GetStartupInfoW
LCMapStringW
GetCPInfo
HeapAlloc
IsProcessorFeaturePresent
HeapCreate
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
GetCurrentThreadId
GetACP
GetOEMCP
IsValidCodePage
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
SetFilePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
ExitProcess
WriteFile
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
HeapSize
CreateFileW
user32
ClientToScreen
gdi32
GetTextExtentPoint32A
advapi32
CloseEventLog
winhttp
WinHttpWriteData
Sections
.text Size: 251KB - Virtual size: 250KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 67KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yate Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ