C:\Users\User\source\repos\Вебка 2\x64\Release\Вебка 2.pdb
Static task
static1
Behavioral task
behavioral1
Sample
4f3c004fb8e66cc34f44cafe6a3540724925cac754124999ba424797fd16e1b8.exe
Resource
win10v2004-20250619-en
Behavioral task
behavioral2
Sample
4f3c004fb8e66cc34f44cafe6a3540724925cac754124999ba424797fd16e1b8.exe
Resource
win11-20250610-en
General
-
Target
4f3c004fb8e66cc34f44cafe6a3540724925cac754124999ba424797fd16e1b8
-
Size
319KB
-
MD5
8c9908027dac44fcb913f1bd1a27f19b
-
SHA1
22a8909d8b4e507a442e38caaac2dbd77ff58899
-
SHA256
4f3c004fb8e66cc34f44cafe6a3540724925cac754124999ba424797fd16e1b8
-
SHA512
56bcc8f4d8a967031e9af2da00bb9cdcc0572e926ff12dc689f64c3a16aec5c1f20767a37aa4f790279cf6dbca692e2bc269c432433918b936707fa71a26f70f
-
SSDEEP
6144:mjpZNZOlh88podq6Q4Ag5HotrMTWhFYyULAQE3K4:ONZOM8cqnng5H8yWhi8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4f3c004fb8e66cc34f44cafe6a3540724925cac754124999ba424797fd16e1b8
Files
-
4f3c004fb8e66cc34f44cafe6a3540724925cac754124999ba424797fd16e1b8.exe windows:6 windows x64 arch:x64
c8a8ff17b928d05b6420b035b26c9635
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
kernel32
GetLastError
GetFileAttributesA
Process32NextW
Process32FirstW
CloseHandle
CreateProcessW
CopyFileW
GetComputerNameA
SetEndOfFile
WriteConsoleW
HeapSize
GetProcessHeap
Sleep
CreateToolhelp32Snapshot
FindClose
FindNextFileA
GetModuleFileNameW
GetDriveTypeA
FindFirstFileA
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
GetTimeZoneInformation
HeapReAlloc
ReadConsoleW
ReadFile
SetStdHandle
EnumSystemLocalesW
GetLogicalDrives
CreateDirectoryW
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
MultiByteToWideChar
LCMapStringEx
GetStringTypeW
GetCPInfo
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
RaiseException
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
CreateFileW
GetDriveTypeW
GetFileInformationByHandle
GetFileType
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetStdHandle
WriteFile
GetCommandLineA
GetCommandLineW
GetFileSizeEx
SetFilePointerEx
HeapAlloc
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
HeapFree
WaitForSingleObject
GetExitCodeProcess
GetFileAttributesExW
GetCurrentDirectoryW
GetFullPathNameW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
VirtualProtect
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
RtlUnwind
user32
FindWindowA
MessageBoxW
ShowWindow
advapi32
CheckTokenMembership
FreeSid
RegSetValueExW
RegCloseKey
AllocateAndInitializeSid
RegOpenKeyExW
shell32
SHGetFolderPathW
ShellExecuteExW
ws2_32
socket
closesocket
WSACleanup
htons
send
shutdown
WSAStartup
inet_addr
connect
shlwapi
PathRelativePathToA
iphlpapi
GetAdaptersInfo
Sections
.text Size: 217KB - Virtual size: 217KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 81KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.fptable Size: 512B - Virtual size: 256B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ