C:\seroririkazeyu\poxuh\hotajoj\hewozob.pdb
Static task
static1
Behavioral task
behavioral1
Sample
6a82d2a3aa4290f69fc5fbc1670d88b2.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
6a82d2a3aa4290f69fc5fbc1670d88b2.exe
Resource
win10v2004-20241007-en
General
-
Target
6a82d2a3aa4290f69fc5fbc1670d88b2
-
Size
426KB
-
MD5
6a82d2a3aa4290f69fc5fbc1670d88b2
-
SHA1
20337ac53444a290ef4885d7b188f349aedd8c14
-
SHA256
0a71ab9b51d2023bcca7197bc67335cbd77609863f907cb5e0ea0b739ae21546
-
SHA512
cdbf82bb57639f43dec36a497d3e6c7a072b23e108540879b16c3f760732e71f52158f534e8022bb6132a5f7fec675081038ad8e0d942fa03b5bed3aa84498b0
-
SSDEEP
12288:MccP/l6Qq0hS9zQf0vQquWYrltHu5d26:MIGh8Q8s3/+d2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a82d2a3aa4290f69fc5fbc1670d88b2
Files
-
6a82d2a3aa4290f69fc5fbc1670d88b2.exe windows:5 windows x86 arch:x86
66bf435feaaa12e148aa302420048fbf
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
OpenMutexA
GetConsoleAliasExesLengthW
GetNamedPipeHandleStateW
GetQueuedCompletionStatus
FillConsoleOutputCharacterW
EnumSystemCodePagesA
LocalSize
GetVolumeNameForVolumeMountPointA
WriteConsoleInputA
EnumDateFormatsW
FindNextFileA
CopyFileExA
BuildCommDCBAndTimeoutsW
VerifyVersionInfoA
VirtualLock
SetVolumeLabelW
UnlockFile
GetProfileSectionA
VerifyVersionInfoW
IsSystemResumeAutomatic
GetProcessPriorityBoost
GlobalGetAtomNameW
DeleteFileW
FindNextVolumeMountPointW
TlsSetValue
LoadResource
GetConsoleTitleA
GetComputerNameExW
OpenEventW
GetModuleHandleA
GetSystemDirectoryW
GetDriveTypeW
BuildCommDCBAndTimeoutsA
GetShortPathNameW
ReleaseActCtx
GetCommandLineA
InterlockedExchange
CopyFileW
CreateActCtxW
FormatMessageW
GetModuleFileNameA
EnterCriticalSection
FindNextVolumeW
GetExitCodeThread
LoadLibraryA
CreateNamedPipeW
GetUserDefaultLCID
GetConsoleAliasesLengthA
WriteProfileSectionW
AddAtomA
InterlockedDecrement
HeapSize
_hread
InterlockedCompareExchange
GetStartupInfoA
CreateMailslotW
GetCPInfoExA
GetSystemWow64DirectoryW
SetLastError
GetPrivateProfileIntW
GetConsoleAliasExesLengthA
DebugBreak
EndUpdateResourceA
GetTickCount
OpenFileMappingA
GetDefaultCommConfigA
VirtualAlloc
TerminateThread
GetACP
GetDiskFreeSpaceExW
DefineDosDeviceW
TerminateProcess
EnumResourceLanguagesW
GetCPInfoExW
SetConsoleTextAttribute
GlobalGetAtomNameA
IsProcessInJob
MoveFileA
WriteConsoleW
GetProcAddress
lstrcatA
WriteConsoleOutputA
WritePrivateProfileStructW
GetDriveTypeA
GetFileAttributesA
CopyFileA
GetComputerNameExA
ResetEvent
MoveFileW
FreeLibrary
GetCommState
InterlockedExchangeAdd
DeleteFiber
EnumDateFormatsA
SetVolumeMountPointA
GetOverlappedResult
GlobalAlloc
SetThreadPriorityBoost
SetFileShortNameW
GetFileAttributesW
SetCalendarInfoA
ConvertFiberToThread
SetComputerNameA
GetConsoleAliasesA
EnumDateFormatsExW
SetTimeZoneInformation
GetConsoleOutputCP
MoveFileWithProgressA
GetStdHandle
SetLocalTime
GetStringTypeW
EnumSystemLocalesA
GetConsoleAliasesLengthW
CreateMemoryResourceNotification
OpenSemaphoreW
GetModuleHandleExA
LoadLibraryW
GetCurrentActCtx
SetFileTime
GetFileType
GetNamedPipeHandleStateA
UnhandledExceptionFilter
SetProcessShutdownParameters
lstrcpynA
GlobalUnWire
FillConsoleOutputCharacterA
GetCompressedFileSizeW
ReadConsoleA
MapUserPhysicalPages
WriteConsoleOutputCharacterW
OpenJobObjectW
CreateFileW
SetTimerQueueTimer
GetFileInformationByHandle
SetUnhandledExceptionFilter
RaiseException
HeapValidate
IsBadReadPtr
DeleteCriticalSection
LeaveCriticalSection
GetModuleFileNameW
GetCurrentProcess
IsDebuggerPresent
GetLastError
SetFilePointer
SetStdHandle
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
InterlockedIncrement
GetOEMCP
GetCPInfo
IsValidCodePage
TlsGetValue
GetModuleHandleW
TlsAlloc
GetCurrentThreadId
TlsFree
Sleep
ExitProcess
SetHandleCount
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
HeapFree
VirtualFree
HeapAlloc
HeapReAlloc
RtlUnwind
InitializeCriticalSectionAndSpinCount
OutputDebugStringA
OutputDebugStringW
FlushFileBuffers
WriteConsoleA
MultiByteToWideChar
GetStringTypeA
LCMapStringA
LCMapStringW
GetLocaleInfoA
CreateFileA
CloseHandle
ReadFile
DeleteFileA
user32
CharUpperA
winhttp
WinHttpWriteData
Sections
.text Size: 231KB - Virtual size: 231KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 174KB - Virtual size: 6.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ