C:\jecucaw\damisisa\hihageli_zonu68\bivewimura\24\rulidow.pdb
Static task
static1
Behavioral task
behavioral1
Sample
c35efcd0250efabbbc2f60389d78234385e2af7defe42cac169021de4d0bdc3f.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
c35efcd0250efabbbc2f60389d78234385e2af7defe42cac169021de4d0bdc3f.exe
Resource
win10v2004-20241007-en
General
-
Target
c35efcd0250efabbbc2f60389d78234385e2af7defe42cac169021de4d0bdc3f
-
Size
273KB
-
MD5
32a218ad6ce67b809db395fd471067d4
-
SHA1
d99a85954fe667e360cb9ad5a818e48459f039ea
-
SHA256
c35efcd0250efabbbc2f60389d78234385e2af7defe42cac169021de4d0bdc3f
-
SHA512
efc9a25111ae0870c4fb0fed78909173cfd74aa5582425906a676d021061626eccc2c62908e73ef7a40476d4174eb12cda4ea3c728f5581cdd30009219cd8188
-
SSDEEP
6144:oxyKApofEJjc7UlXneo/T349/mQ8NycU2s+uIqf7:oypofEJjc7kecb45z8NycU2C
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c35efcd0250efabbbc2f60389d78234385e2af7defe42cac169021de4d0bdc3f
Files
-
c35efcd0250efabbbc2f60389d78234385e2af7defe42cac169021de4d0bdc3f.exe windows:5 windows x86 arch:x86
22991cdf80531e1a8bd9d886f1a9df50
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
FindNextFileW
CopyFileExA
VerifyVersionInfoA
ReadConsoleOutputCharacterW
FlushConsoleInputBuffer
UnlockFile
GetProfileSectionA
VerifyVersionInfoW
QueryDosDeviceW
OpenThread
SetProcessPriorityBoost
GlobalGetAtomNameA
lstrlenA
FindNextVolumeMountPointA
GlobalDeleteAtom
WriteConsoleInputW
FindResourceA
GetComputerNameExW
OpenEventW
CallNamedPipeW
GetModuleHandleA
GetSystemDirectoryA
GetCurrentDirectoryW
BuildCommDCBAndTimeoutsA
GetProcAddress
GetModuleHandleW
VirtualAlloc
SetMailslotInfo
GetDiskFreeSpaceExA
WriteConsoleW
GetCommandLineA
GetCalendarInfoW
SearchPathA
CreateActCtxW
FormatMessageA
InitializeCriticalSection
GetSystemDefaultLangID
GetConsoleAliasesLengthA
WriteProfileSectionW
AddAtomA
InterlockedIncrement
HeapSize
_hread
GetStartupInfoA
CreateMailslotW
MultiByteToWideChar
GetSystemWow64DirectoryA
GetLastError
EnumDateFormatsW
DebugBreak
GetTickCount
LoadLibraryW
LoadLibraryA
SetLastError
GetDefaultCommConfigA
GetConsoleAliasesLengthW
GetComputerNameA
EnumSystemLocalesA
DeleteCriticalSection
LocalFileTimeToFileTime
SearchPathW
GetComputerNameExA
FindNextFileA
ResetEvent
LockFile
CreateMutexA
FindResourceW
SetCommState
FormatMessageW
InterlockedExchangeAdd
CreateFiber
GetConsoleSelectionInfo
GlobalAlloc
GetFileSizeEx
HeapAlloc
GetFileAttributesA
GetSystemWindowsDirectoryW
GetAtomNameW
GetComputerNameW
ReadConsoleInputA
GetPrivateProfileStructA
_hwrite
GetConsoleAliasA
OpenWaitableTimerA
FillConsoleOutputCharacterA
PrepareTape
AddAtomW
SetCurrentDirectoryW
SetCalendarInfoW
CreateFileA
CloseHandle
GetConsoleAliasExesLengthA
LocalFree
UnhandledExceptionFilter
SetUnhandledExceptionFilter
DeleteFileA
RaiseException
GetStartupInfoW
HeapValidate
IsBadReadPtr
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameW
Sleep
InterlockedDecrement
ExitProcess
GetModuleFileNameA
WriteFile
GetStdHandle
SetHandleCount
GetFileType
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
HeapDestroy
HeapCreate
HeapFree
VirtualFree
HeapReAlloc
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
RtlUnwind
InitializeCriticalSectionAndSpinCount
OutputDebugStringA
OutputDebugStringW
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
FlushFileBuffers
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
user32
GetMenuInfo
GetMenuItemID
LoadMenuW
CharUpperW
GetListBoxInfo
GetCursorInfo
advapi32
AbortSystemShutdownW
Sections
.text Size: 147KB - Virtual size: 146KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 66KB - Virtual size: 40.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 59KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ