8cca81993d1ca394d4255a78b6aa42cdd40860d8318522716b5a7c54d47ea153
- SHA256 8cca81993d1ca394d4255a78b6aa42cdd40860d8318522716b5a7c54d47ea153
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Version_Bewerbung_2.0_202566_Bewerbungsnummer_0234521870_Datum_0000000200.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
Version_Bewerbung_2.0_202566_Bewerbungsnummer_0234521870_Datum_0000000200.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
dbgcore.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
dbgcore.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
General
- Target 8cca81993d1ca394d4255a78b6aa42cdd40860d8318522716b5a7c54d47ea153
- Size 6.2MB
- Sample260727-trcaraxtdv
- SHA256 8cca81993d1ca394d4255a78b6aa42cdd40860d8318522716b5a7c54d47ea153
- MD5 c40de8a9344b670dbd085966c2946dd3
- SHA1 a5ffa7c243a245105ff7f70a994aff4d20add16a
- SHA512 dcb33b0cdbc5e1b3f90a6892b45eb673ee22f60d7085adf74a800350cfbb51adeb27f77fff5a9f05c2a3c88652cb4adfd1132615fa1ddebbec6220f6b93dfd2c
- SSDEEP 196608:jnkUPz+LALgKO70K5vjujSx7v0b4yUWNSN:wqSALgKO4/jiAbYWYN
- TLSH T15866331C66437573C60AC0B629EE791FBB98EA41CBD345929C19B90CFF27BA74153780
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/dbgcore.dll
File Explorer
-
8cca81993d1ca394d4255a78b6aa42cdd40860d8318522716b5a7c54d47ea153.zip 6.2MB
-
Settings.txt3.8MB
-
Version_Bewerbung_2.0_202566_Bewerbungsnummer_0234521870_Datum_0000000200.exe.exe 7.0MB
-
dbgcore.dll.dll 1.5MB
Settings.txt
- SHA256 b9fac5fd68f333b9459fa4b0111da8fba64a20022df8ea8595eae6a2fc4b9d9d
- MD5 77239138505c3e63be2d5d55224b02a3
- SHA1 532f165c14f716317da0c70df5253b35ede22b68
- SHA512 d4a112206409429376ec037455946a431a1ea4440ddf8905b09b9ed1ba0e863b2e55916eb960dea0e000f97cd95817d22651cf91a02310f822308b2a9e7e23d7
- SSDEEP 24576:72B+E0Tg6XBYDdzwqP2IY1TL04a9xXoc6aqlEKONs5b9COR9GDSusIKBiVkGmpte:C+1Z2fG8
- TLSH T13D066255E69E6758734AE3E8260128B7FFB4C76D879C98B0B522237BCC430118DD8EB5
- MD5 SHA1 SHA512 SSDEEP TLSH
Version_Bewerbung_2.0_202566_Bewerbungsnummer_0234521870_Datum_0000000200.exe
- IMPHASH 004156754ab615ab2fae8af3fd6c80dd
- SHA256 cb1d73323d3d80004ada185844b0d461abd9ded736d5dc690607f935b4f2b58a
- MD5 91841e006225ac500de7630740a21d91
- SHA1 68875ce8177794df6bf125b2bb8b8ecc3b84517b
- SHA512 d66e70b9d4d1997ac687589d0723c78e6ffe96aa35343b71f4e57750b7aad33d5555fd5d6b743125852e13cc9b9c338a8fb6b4844768054321404a8491546f0e
- SSDEEP 98304:AlCytUlpXv400I/oQHXelFFcYC+NJ/yz0Z13H443UkgiDcWfbpgbLWE6e:Fwgv5oCWjcY9NByzo3H3URiwSib+e
- TLSH T15C7601AA63A552E8D02BD03D8615F627EBB274261710D7DB15B08D5D3F53EE20E3E322
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
c2:25:45:3e:1c:a0:9c:97:0b:c1:49:b4:92:a8:68:3c:07:52:1a:a1:02:0b:ed:22:e5:ad:79:20:b9:7d:bc:2e
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Krzysztof Kowalczyk,O=Krzysztof Kowalczyk,L=San Diego,ST=California,C=US
Chains
Jul 21, 2021
CN=Krzysztof Kowalczyk,O=Krzysztof Kowalczyk,L=San Diego,ST=California,C=US
CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
CN=Krzysztof Kowalczyk,O=Krzysztof Kowalczyk,L=San Diego,ST=California,C=US
CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Digest
aa:b3:16:62:b1:3c:b3:cd:90:31:b1:9a:94:0c:02:37:1c:c9:fb:85
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=Krzysztof Kowalczyk,O=Krzysztof Kowalczyk,L=San Diego,ST=California,C=US
Chains
Jul 21, 2021
CN=Krzysztof Kowalczyk,O=Krzysztof Kowalczyk,L=San Diego,ST=California,C=US
CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
CN=Krzysztof Kowalczyk,O=Krzysztof Kowalczyk,L=San Diego,ST=California,C=US
CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=Krzysztof Kowalczyk,O=Krzysztof Kowalczyk,L=San Diego,ST=California,C=US
Serial Number
c8:a7:9a:cf:a2:0c:a4:15:09:24:5c:1f:7f:64:ff:c4
Issuer
CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 24, 2021 - Aug 23, 2024
Subject
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Serial Number
39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Issuer
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Mar 12, 2019 - Dec 31, 2028
Subject
CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Nov 2, 2018 - Dec 31, 2030
Subject
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 2, 2019 - Jan 18, 2038
Subject
CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Issuer
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 23, 2020 - Jan 22, 2032
Minor OS version
0
Major OS version
6
Entry point
1172192
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\kjk\src\sumatrapdf\out\rel64\SumatraPDF-dll.pdb
comctl32
ImageList_EndDrag
InitCommonControlsEx
ImageList_BeginDrag
ImageList_DragMove
ImageList_DragEnter
ImageList_DragShowNolock
ImageList_Create
ImageList_AddMasked
ord412
ord410
ord413
ImageList_Destroy
CreatePropertySheetPageW
ImageList_GetIconSize
ImageList_Draw
kernel32
FoldStringW
TzSpecificLocalTimeToSystemTime
IsDBCSLeadByte
AreFileApisANSI
GetCurrentDirectoryW
GetEnvironmentVariableW
OutputDebugStringA
GetStdHandle
SetConsoleScreenBufferSize
GetConsoleScreenBufferInfo
ReadDirectoryChangesW
QueueUserAPC
ResetEvent
ExitThread
GetSystemInfo
HeapReAlloc
SetEvent
CreateEventW
CreateToolhelp32Snapshot
GetLocaleInfoA
GetVersionExW
GetCurrentThreadId
WaitForSingleObject
GetEnvironmentVariableA
TerminateProcess
GetCurrentProcess
HeapFree
HeapCreate
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
SetThreadPriority
DeviceIoControl
RemoveDirectoryW
CreateHardLinkW
MoveFileW
ReleaseSemaphore
GetProcessAffinityMask
CreateSemaphoreW
LoadLibraryExA
WriteConsoleW
SetEndOfFile
GetTimeZoneInformation
GetStringTypeW
SetEnvironmentVariableW
GetModuleHandleW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindFirstFileExW
FindClose
SetFilePointerEx
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
HeapSize
GetProcessHeap
SetStdHandle
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
LCMapStringW
CompareStringW
GetModuleHandleExW
SetConsoleCtrlHandler
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
GetFileType
EncodePointer
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SetLastError
RtlPcToFileHeader
RtlUnwindEx
InitializeCriticalSectionEx
GetStartupInfoW
InitializeSListHead
WaitForSingleObjectEx
InitializeCriticalSectionAndSpinCount
IsProcessorFeaturePresent
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
SetFilePointer
GetExitCodeProcess
GetACP
LocalFileTimeToFileTime
FileTimeToDosDateTime
FileTimeToLocalFileTime
SetThreadContext
FlushInstructionCache
VirtualAlloc
VirtualFree
VirtualProtect
RaiseException
OutputDebugStringW
WideCharToMultiByte
GetSystemDirectoryW
OpenThread
VirtualQuery
GetThreadContext
GetModuleHandleA
ResumeThread
CreateThread
HeapAlloc
Module32FirstW
HeapDestroy
GetCurrentProcessId
SetCurrentDirectoryW
DeleteFileW
GetTempPathW
GetUserDefaultUILanguage
IsDebuggerPresent
MapViewOfFile
CreateFileMappingW
LoadLibraryW
UnmapViewOfFile
SetErrorMode
GetFullPathNameW
GetDateFormatW
GetTimeFormatW
MoveFileExW
LocalFree
FormatMessageW
SetFileAttributesW
GetFileAttributesW
FindResourceW
LoadResource
LockResource
SizeofResource
SetThreadExecutionState
GlobalAddAtomW
GlobalDeleteAtom
GetTickCount
GlobalUnlock
GlobalLock
GlobalFree
GlobalAlloc
GetCurrentThread
GetSystemTime
CopyFileW
ExitProcess
GetCommandLineW
Process32FirstW
Process32NextW
OpenProcess
GetCPInfo
GetLastError
SuspendThread
Thread32First
WaitForMultipleObjectsEx
Thread32Next
GetModuleFileNameA
AllocConsole
FindNextFileW
FindFirstFileW
SetUnhandledExceptionFilter
Module32NextW
ReadConsoleW
MulDiv
QueryPerformanceCounter
QueryPerformanceFrequency
GetLogicalDrives
CompareFileTime
CancelIo
GetFileTime
GetDriveTypeW
GetTempFileNameW
GetFileAttributesExW
GetFileInformationByHandle
CreateFileW
GetVolumePathNameW
GetModuleFileNameW
FormatMessageA
VerifyVersionInfoW
FreeLibrary
CreateProcessW
VerSetConditionMask
GetProcAddress
SetFileTime
GetPrivateProfileIntW
GetShortPathNameW
WriteFile
GetSystemTimeAsFileTime
SystemTimeToFileTime
CloseHandle
Sleep
GlobalMemoryStatusEx
FreeEnvironmentStringsW
GetLocaleInfoW
MultiByteToWideChar
CreateDirectoryW
ReadFile
GetFileSizeEx
WritePrivateProfileStringW
GetLongPathNameW
GetWindowsDirectoryW
user32
GetSysColor
SystemParametersInfoW
GetSystemMetrics
CreateAcceleratorTableW
ClientToScreen
SendMessageW
OemToCharA
PostMessageW
EndPaint
BeginPaint
ReleaseDC
IsIconic
GetCursorPos
CharLowerW
HideCaret
SetClassLongPtrW
ShowCaret
IsCharAlphaNumericW
ValidateRect
GetUpdateRect
GetWindowThreadProcessId
GetMessageW
AllowSetForegroundWindow
FindWindowExW
LoadBitmapW
TranslateAcceleratorW
SetParent
MapVirtualKeyW
ScreenToClient
IsWindow
CharLowerBuffW
GetAncestor
IsCharUpperW
GetWindowLongW
GetWindow
CheckRadioButton
EndDialog
SetDlgItemTextW
SendDlgItemMessageW
DialogBoxIndirectParamW
IsDlgButtonChecked
SetWindowLongW
CheckDlgButton
DialogBoxParamW
SetActiveWindow
MoveWindow
GetFocus
OpenClipboard
CloseClipboard
EmptyClipboard
GetWindowTextLengthW
ReuseDDElParam
ShowWindowAsync
IsWindowUnicode
UnpackDDElParam
LoadCursorW
DrawTextW
ModifyMenuW
CheckMenuRadioItem
GetMenuItemID
GetMenu
SetMenuItemInfoW
SetMenu
DrawTextExW
InsertMenuW
AppendMenuA
MsgWaitForMultipleObjects
DispatchMessageW
IsDialogMessageW
PeekMessageW
MessageBoxA
TranslateMessage
GetDlgItem
PostQuitMessage
EnableWindow
MessageBeep
GetDesktopWindow
UpdateWindow
MessageBoxW
CreateMenu
BringWindowToTop
LoadIconW
wsprintfA
DestroyWindow
GetMenuItemInfoW
SetForegroundWindow
DdeFreeStringHandle
DdeDisconnect
CheckMenuItem
SetClipboardData
EndDeferWindowPos
DdeFreeDataHandle
DdeClientTransaction
DdeUninitialize
DdeInitializeW
TrackMouseEvent
ReleaseCapture
GetMonitorInfoW
GetWindowInfo
DdeConnect
DdeCreateStringHandleW
BeginDeferWindowPos
DestroyCursor
EnumDisplayMonitors
MonitorFromWindow
MonitorFromRect
CopyImage
GetKeyState
AdjustWindowRectEx
DeferWindowPos
SetLayeredWindowAttributes
IsWindowEnabled
WindowFromDC
WaitMessage
GetMessagePos
SetPropW
RemovePropW
GetPropW
GetSystemMenu
CallWindowProcW
GetWindowRect
IsWindowVisible
SetWindowPos
GetMenuItemCount
SetWindowLongPtrW
CreateWindowExW
CreatePopupMenu
KillTimer
GetWindowLongPtrW
RegisterClassExW
GetClassLongPtrW
TrackPopupMenu
ShowWindow
InvalidateRgn
OffsetRect
RedrawWindow
MapWindowPoints
SetMenuDefaultItem
GetForegroundWindow
DestroyMenu
FindWindowW
GetWindowDC
TrackPopupMenuEx
RemoveMenu
GetClientRect
IsZoomed
AppendMenuW
DrawIconEx
EnableMenuItem
DrawEdge
GetParent
CharToOemBuffW
CharUpperW
OemToCharBuffA
DrawFrameControl
InvalidateRect
SetScrollInfo
DefWindowProcW
ShowScrollBar
GetDC
FillRect
GetCursor
GetScrollInfo
GetScrollPos
GetCapture
SetTimer
SetFocus
SetCapture
SetCursor
CharToOemA
gdi32
ExtTextOutW
CreatePatternBrush
CreateBitmap
GetObjectW
GetObjectA
IntersectClipRect
SetWorldTransform
CreateDIBSection
SetLayout
CreateRoundRectRgn
TextOutW
GetTextExtentPoint32W
SelectClipRgn
RoundRect
BitBlt
StartPage
AbortDoc
EndDoc
CreateDCW
SetMapMode
StartDocW
EndPage
GetDeviceCaps
LineTo
MoveToEx
SetBkColor
SetBkMode
CreateFontIndirectW
GetClipBox
CreateRectRgn
SetViewportOrgEx
ExcludeClipRect
ExtSelectClipRgn
SetBrushOrgEx
SelectObject
CreateCompatibleDC
PatBlt
StretchBlt
GetStockObject
DeleteDC
SetTextColor
CreatePen
Rectangle
DeleteObject
CreateSolidBrush
SetROP2
SetStretchBltMode
SetDIBits
GetDIBits
SetGraphicsMode
SetDIBColorTable
GetDIBColorTable
CreateCompatibleBitmap
winspool.drv
ClosePrinter
EnumPrintersW
DeviceCapabilitiesW
DocumentPropertiesW
GetPrinterW
OpenPrinterW
ord203
comdlg32
GetSaveFileNameW
PrintDlgExW
CommDlgExtendedError
GetOpenFileNameW
advapi32
SetFileSecurityW
LookupPrivilegeValueW
AdjustTokenPrivileges
OpenProcessToken
RegEnumKeyW
SetSecurityDescriptorDacl
AllocateAndInitializeSid
RegCloseKey
RegQueryInfoKeyW
RegOpenKeyExW
RegCreateKeyExW
RegQueryValueExW
InitializeSecurityDescriptor
CheckTokenMembership
FreeSid
RegSetKeySecurity
shell32
SHGetMalloc
DragFinish
SHGetPathFromIDListW
SHFileOperationW
SHGetFileInfoW
SHBindToParent
ShellExecuteExW
SHGetDesktopFolder
SHChangeNotify
DragAcceptFiles
SHAddToRecentDocs
SHGetFolderPathW
SHBrowseForFolderW
DragQueryPoint
DragQueryFileW
ole32
ReleaseStgMedium
CreateStreamOnHGlobal
CoTaskMemFree
CoUninitialize
CoInitialize
CoGetMalloc
CoCreateInstance
OleUninitialize
OleInitialize
CoTaskMemAlloc
oleaut32
SafeArrayCreateVector
SafeArrayPutElement
SysFreeString
VariantClear
VariantInit
SysAllocString
Name
.text
Size
1.3MB
Virtual Size
1.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
835KB
Virtual Size
834KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
35KB
Virtual Size
74KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
66KB
Virtual Size
66KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
252B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4.7MB
Virtual Size
4.7MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=13, id=259, version=27412,
count=206, id=261, version=27412,
count=3, id=253, version=28518,
count=19, id=260, version=30034,
count=11, id=259, version=30034,
count=28, id=260, version=27412,
count=1, id=262, version=27412,
count=1, id=263, version=27412,
count=55, id=261, version=30034,
count=23, id=257, version=27412,
count=998, id=1, productName=Unmarked objects,
count=217, id=264, version=30132,
count=1, id=255, version=30132,
count=1, id=258, version=30132,
dbgcore.dll
- IMPHASH 14c537ffb5f51243dc4ba646f61c9784
- SHA256 adbcaae34947d76e04d15b29547f07f000b2c776d2e5cf979d8e1564fabd9822
- MD5 42db674c8120a5ca4502746a33f59263
- SHA1 eed9548e9b6efbe8c904b572ae92a32b95ba94f6
- SHA512 e8435c623f5538e080bfad1d2422f8d5ae3a828ce1f919f27e71cdd0591ed8f430244943177989ee3d9b1e3da93abf3de1da4d976c8a0a4ca84747f419c6dad4
- SSDEEP 6144:P4XUuJWobj1p6eHtFXwbS0PaXK3To4croD0bU0:rukAXMPvTg40l
- TLSH T1DE656D82FBC5BC57DEA50631899F83693338FAD017A36B2319B47E345E039D0AE85647
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4896
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
advapi32
GetUserNameA
RegCloseKey
RegOpenKeyExA
RegSetValueExA
kernel32
CopyFileA
CreateProcessA
DeleteCriticalSection
EnterCriticalSection
GetActiveProcessorCount
GetComputerNameA
GetDiskFreeSpaceExA
GetFileAttributesA
GetLastError
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
GetTickCount
GlobalMemoryStatusEx
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
MulDiv
MultiByteToWideChar
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte
msvcrt
___lc_codepage_func
___mb_cur_max_func
__iob_func
_amsg_exit
_errno
_initterm
_lock
_stricmp
_unlock
abort
calloc
exit
fclose
ferror
fopen_s
fputc
fread
free
fwrite
localeconv
malloc
memcpy
memset
realloc
strcmp
strerror
strlen
strncmp
strrchr
vfprintf
wcslen
user32
GetDesktopWindow
GetWindowRect
GetKomInterRevengeNumber
GetKommFailure
GetTrotzkiPowerFirstAttack
GetTrotzkiPowerTwoAttack
KomInternList
SC_Trotzki
SW3_GetSyscallAddress
SW3_TrotzkiRev
TrotzkiTrotzkiTrotzki
Trotzki_Populate
antifa
antifa_is_the_best_f
beginPath
buf
change
checkStorage
classStruggle
cmdValue
commIsCom
copy_Trotzki_World_Revo
copy_relative_file
cpuCount
detectResolution
enoughRam
fastCall
get_exe_folder
hKey
helloFriendsss
hostnameCheck
internationale_revoultion
kommEncoding
komm_world_trotz
ladeComm
len
myList
my_payload
my_strcpy_s
op
pathFunction
ramCheck
regPath
resourcesTest
set_file_hidden
target
timeDetect
tooFewFeatures
tooLittleRam
trozk_rat
trozki_attacker
username
valueName
world_revoultion_winner
write_part
Name
.text
Size
33KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
1.2MB
Virtual Size
1.2MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
458.2MB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
88B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
104B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/4
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/19
Size
61KB
Virtual Size
60KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/31
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/45
Size
25KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/57
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/70
Size
512B
Virtual Size
463B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/81
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/97
Size
30KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/113
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ