5133b5ccbc90afe0d4e7b92e3fec18c0863a5d9b05aa1e5ffcb1bea360d8ddc2

General

Target
5133b5ccbc90afe0d4e7b92e3fec18c0863a5d9b05aa1e5ffcb1bea360d8ddc2
Size 238KB
Sample240128-19ebdsbda7
SHA256 5133b5ccbc90afe0d4e7b92e3fec18c0863a5d9b05aa1e5ffcb1bea360d8ddc2
MD5 3405c691874227799e2fa4294b507d79
SHA1 31a0851d9e149ad490a3af51cbf19307c619f8c7
SHA512 009fd73d17b5ecf28f94dfe452662c635b609181bf2821e693d4bfe102a258f71b5e21ae076c08a87d7c28ed94b0838b64e63c45a6ba2644410817586e0543fc
SSDEEP 3072:9UilALEdnYX29uis+FQkadKgh+GbviWRL8AN02GlP9671KjKNGhwE:9v6L+nQWR9Hgh+e6Wd7+2GlPAs6ywE
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5133b5ccbc90afe0d4e7b92e3fec18c0863a5d9b05aa1e5ffcb1bea360d8ddc2

File Explorer

5133b5ccbc90afe0d4e7b92e3fec18c0863a5d9b05aa1e5ffcb1bea360d8ddc2

.exe 238KB

5133b5ccbc90afe0d4e7b92e3fec18c0863a5d9b05aa1e5ffcb1bea360d8ddc2

IMPHASH b9bed65464be6d89814eac251ed4ea2e
SHA256 5133b5ccbc90afe0d4e7b92e3fec18c0863a5d9b05aa1e5ffcb1bea360d8ddc2
MD5 3405c691874227799e2fa4294b507d79
SHA1 31a0851d9e149ad490a3af51cbf19307c619f8c7
SHA512 009fd73d17b5ecf28f94dfe452662c635b609181bf2821e693d4bfe102a258f71b5e21ae076c08a87d7c28ed94b0838b64e63c45a6ba2644410817586e0543fc
SSDEEP 3072:9UilALEdnYX29uis+FQkadKgh+GbviWRL8AN02GlP9671KjKNGhwE:9v6L+nQWR9Hgh+e6Wd7+2GlPAs6ywE
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8235

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\zumev_pitopayejex\69-taxic\forovasuhavo51\t.pdb

kernel32

GetSystemDefaultLangID InterlockedDecrement QueryDosDeviceA InterlockedCompareExchange MoveFileWithProgressA GetModuleHandleW GetTickCount VirtualFree GetConsoleAliasesLengthA FreeConsole SetComputerNameExW GetStartupInfoW CreateJobObjectA GetLastError SetLastError GetProcAddress AttachConsole VirtualAlloc SetVolumeLabelW RemoveDirectoryA LoadLibraryA WriteConsoleA LocalAlloc MoveFileA FindFirstVolumeMountPointW FindNextChangeNotification GlobalFindAtomW GetModuleFileNameA GetStringTypeW PurgeComm GetFileAttributesExW WaitForDebugEvent WriteConsoleOutputAttribute SetCalendarInfoA GetCurrentProcessId ReadConsoleOutputCharacterW DeleteFileA MultiByteToWideChar Sleep ExitProcess GetCPInfo InterlockedIncrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree RaiseException WriteFile GetStdHandle DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSectionAndSpinCount GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapCreate QueryPerformanceCounter GetSystemTimeAsFileTime LCMapStringA WideCharToMultiByte LCMapStringW GetStringTypeA GetLocaleInfoA HeapAlloc HeapReAlloc GetModuleHandleA HeapSize RtlUnwind

Sharing

General

Malware Config

Signatures

File Explorer

5133b5ccbc90afe0d4e7b92e3fec18c0863a5d9b05aa1e5ffcb1bea360d8ddc2

kernel32

generic