7aacb9cb85a65e07bb11ad96f6a1c76e

General

Target
7aacb9cb85a65e07bb11ad96f6a1c76e
Size 361KB
Sample240127-thq3jsfch3
SHA256 e01b853f68f0fcc2bd3122a9ee5c4a829a77f38d066ad020a3249c734b5e6d4c
MD5 7aacb9cb85a65e07bb11ad96f6a1c76e
SHA1 2590e37b59ef6e3ee078696f972bc02eed025bd0
SHA512 99936feb8f9e11c24ec01c3037f8ff66f7ce442c743266ded3a0196c3913cd11d4200c87923d47f469f14c1f43690900d89476fefaa3203f92d0998338522691
SSDEEP 6144:KxLneijV7iy0rH6qDbeo4t0y8ueuo2iLADauBsj9om+WCfO:Kx7ecV7MrRDb5XnkDkjuTnf
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7aacb9cb85a65e07bb11ad96f6a1c76e

File Explorer

7aacb9cb85a65e07bb11ad96f6a1c76e

.exe 361KB

7aacb9cb85a65e07bb11ad96f6a1c76e

IMPHASH f530acf7acd4a5c8880ba2a4704d4cbb
SHA256 e01b853f68f0fcc2bd3122a9ee5c4a829a77f38d066ad020a3249c734b5e6d4c
MD5 7aacb9cb85a65e07bb11ad96f6a1c76e
SHA1 2590e37b59ef6e3ee078696f972bc02eed025bd0
SHA512 99936feb8f9e11c24ec01c3037f8ff66f7ce442c743266ded3a0196c3913cd11d4200c87923d47f469f14c1f43690900d89476fefaa3203f92d0998338522691
SSDEEP 6144:KxLneijV7iy0rH6qDbeo4t0y8ueuo2iLADauBsj9om+WCfO:Kx7ecV7MrRDb5XnkDkjuTnf
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

7806

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\retayude hekewu.pdb

kernel32

lstrcpynA GetDefaultCommConfigW ReadConsoleA InterlockedDecrement SetEnvironmentVariableW GetEnvironmentStringsW GetUserDefaultLCID SetVolumeMountPointW GetSystemDefaultLCID EnumCalendarInfoExW InitializeCriticalSectionAndSpinCount GetSystemWindowsDirectoryA LeaveCriticalSection GetComputerNameExA ReadFile GetModuleFileNameW GetACP LCMapStringA VerifyVersionInfoW InterlockedExchange GetProcAddress PeekConsoleInputW VerLanguageNameA CopyFileA GetLocalTime WriteConsoleA LocalAlloc SetConsoleOutputCP Module32FirstW GetModuleFileNameA GetModuleHandleA QueueUserWorkItem GetConsoleTitleW PeekConsoleInputA ReadConsoleInputW GetCurrentProcessId AddConsoleAliasA FindNextVolumeA PulseEvent GetCommandLineW GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId GetLastError Sleep HeapSize ExitProcess EnterCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection SetFilePointer WriteFile FreeEnvironmentStringsW HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetOEMCP IsValidCodePage RaiseException HeapAlloc HeapReAlloc VirtualAlloc LoadLibraryA RtlUnwind SetStdHandle FlushFileBuffers GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA CreateFileA CloseHandle

gdi32

GetCharWidthFloatW

Sharing

General

Malware Config

Signatures

File Explorer

7aacb9cb85a65e07bb11ad96f6a1c76e

kernel32

gdi32

generic