C:\hatatejobiz-bak\juhiti.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2189b460506f57d5684e8d3d4ec0f2d94f9ba1d6e74e8efa6cc056b60cd4be9f.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
2189b460506f57d5684e8d3d4ec0f2d94f9ba1d6e74e8efa6cc056b60cd4be9f.exe
Resource
win10v2004-20241007-en
General
-
Target
2189b460506f57d5684e8d3d4ec0f2d94f9ba1d6e74e8efa6cc056b60cd4be9f
-
Size
12.2MB
-
MD5
c944914ddfef1d677fae78bf3e0b7f30
-
SHA1
8b19c08d3944854e0ef40c61fd2d29631ba50497
-
SHA256
2189b460506f57d5684e8d3d4ec0f2d94f9ba1d6e74e8efa6cc056b60cd4be9f
-
SHA512
45e12665d44fb3dcb59d830a425cbf4560eea775ecdcaa8d32b1c92ab94c063adf95f36ea7a1f6bb29d9e2d06a6134d30c9d43c37934e6ef10584efb9020e1ec
-
SSDEEP
24576:h9PwZJBqV72ZFcZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZ:6XF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2189b460506f57d5684e8d3d4ec0f2d94f9ba1d6e74e8efa6cc056b60cd4be9f
Files
-
2189b460506f57d5684e8d3d4ec0f2d94f9ba1d6e74e8efa6cc056b60cd4be9f.exe windows:5 windows x86 arch:x86
aa17de4797e2f58234070c4dc34e5bf7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
ZombifyActCtx
GetConsoleAliasesLengthA
GetVersionExW
GetConsoleOutputCP
GetDefaultCommConfigA
SetCommConfig
GetDriveTypeW
FreeEnvironmentStringsW
CreateTimerQueue
FindNextVolumeA
InitializeCriticalSectionAndSpinCount
ReadConsoleInputW
TlsSetValue
SetComputerNameExA
FindAtomW
BuildCommDCBAndTimeoutsA
VirtualProtect
GetModuleHandleA
LocalAlloc
InitializeCriticalSection
TlsGetValue
GetCommandLineW
InterlockedIncrement
GetCalendarInfoA
CopyFileA
OutputDebugStringW
SetSystemTimeAdjustment
GetPriorityClass
WritePrivateProfileStringW
ExitThread
GlobalWire
HeapCompact
GetStartupInfoA
CreatePipe
GetCPInfoExA
GetWindowsDirectoryW
GetSystemWow64DirectoryA
SetLastError
WriteProfileSectionW
GetCalendarInfoW
IsDebuggerPresent
SetConsoleCursorPosition
GetLastError
ContinueDebugEvent
WriteFile
GetNumberOfConsoleInputEvents
GetSystemWindowsDirectoryW
GlobalFindAtomA
FindNextChangeNotification
CreateActCtxA
GetMailslotInfo
GetPrivateProfileIntA
_lread
InterlockedDecrement
DefineDosDeviceA
SetVolumeMountPointA
EndUpdateResourceW
WriteConsoleA
InterlockedPushEntrySList
WritePrivateProfileSectionA
GetPrivateProfileStructA
DeleteCriticalSection
GetFileAttributesExW
LocalFileTimeToFileTime
MoveFileW
GetVolumePathNameA
TerminateProcess
lstrcmpW
GetComputerNameW
FindActCtxSectionStringA
SetThreadContext
MoveFileExA
GetProcAddress
GlobalCompact
UnregisterWait
WriteConsoleInputA
FormatMessageA
FatalExit
SetCommTimeouts
WaitNamedPipeW
CreateIoCompletionPort
FindResourceExA
GetSystemTimeAsFileTime
GetSystemInfo
EnumCalendarInfoExW
OpenSemaphoreA
FreeEnvironmentStringsA
GetPrivateProfileSectionNamesA
SetMailslotInfo
lstrcpyW
VerLanguageNameW
GetThreadSelectorEntry
GetSystemTime
UnlockFile
GetConsoleCP
GetConsoleAliasA
SetConsoleScreenBufferSize
GetAtomNameW
WriteConsoleInputW
CreateMailslotA
GetCommState
SetHandleCount
_lopen
GetConsoleAliasExesLengthW
ResetWriteWatch
ClearCommBreak
ChangeTimerQueueTimer
GetOverlappedResult
EnumDateFormatsA
GlobalDeleteAtom
HeapFree
GetConsoleWindow
GetStringTypeA
SetFilePointer
PostQueuedCompletionStatus
SetFileApisToANSI
OpenWaitableTimerW
GetCurrentProcessId
PeekNamedPipe
FillConsoleOutputCharacterW
FindNextVolumeMountPointA
WriteProfileStringW
InitAtomTable
GlobalAddAtomA
WriteConsoleOutputCharacterA
TerminateJobObject
VirtualAlloc
GetBinaryTypeW
QueryDosDeviceW
LeaveCriticalSection
HeapSetInformation
FileTimeToDosDateTime
Sleep
EnterCriticalSection
RaiseException
RtlUnwind
MoveFileA
GetCommandLineA
HeapValidate
IsBadReadPtr
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetModuleFileNameW
GetCurrentProcess
GetModuleHandleW
TlsAlloc
GetCurrentThreadId
TlsFree
CloseHandle
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
ExitProcess
GetStdHandle
GetFileType
QueryPerformanceCounter
GetTickCount
GetModuleFileNameA
GetEnvironmentStrings
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
HeapAlloc
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleMode
DebugBreak
OutputDebugStringA
WriteConsoleW
LoadLibraryW
SetStdHandle
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
GetLocaleInfoA
LoadLibraryA
CreateFileA
user32
OemToCharA
advapi32
GetFileSecurityW
msimg32
AlphaBlend
Sections
.text Size: 182KB - Virtual size: 182KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 66KB - Virtual size: 219KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nocifi Size: 512B - Virtual size: 5B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 11.9MB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ