fef1325325dc2115dc99a3c5b4148eb7df9a72b8233c695b364cb92bd3f3020a

General

Target
fef1325325dc2115dc99a3c5b4148eb7df9a72b8233c695b364cb92bd3f3020a
Size 202KB
Sample240128-2d281sbeh8
SHA256 fef1325325dc2115dc99a3c5b4148eb7df9a72b8233c695b364cb92bd3f3020a
MD5 a6aaf1c14caeb87c027f256394d8cec9
SHA1 acd55dd0662f610ad8111f50aa729e06dabb43f5
SHA512 7d169b8d161b75ddee913a97f0cfab01f363ce2abc39bfeb31b572728622579138c77ca9084b93fd586f2d51f3da86fac4a992aae814731fa567ceab9656c7aa
SSDEEP 3072:Dk8L/qRH3T1/gHB2QDJfl6evEFmu1Hljnb5et+2RH8:BL/q11gHBHDKevYmu1FkA
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fef1325325dc2115dc99a3c5b4148eb7df9a72b8233c695b364cb92bd3f3020a

File Explorer

fef1325325dc2115dc99a3c5b4148eb7df9a72b8233c695b364cb92bd3f3020a

.exe 202KB

fef1325325dc2115dc99a3c5b4148eb7df9a72b8233c695b364cb92bd3f3020a

IMPHASH 0b5e116e2702dade4cb07822a0cb5618
SHA256 fef1325325dc2115dc99a3c5b4148eb7df9a72b8233c695b364cb92bd3f3020a
MD5 a6aaf1c14caeb87c027f256394d8cec9
SHA1 acd55dd0662f610ad8111f50aa729e06dabb43f5
SHA512 7d169b8d161b75ddee913a97f0cfab01f363ce2abc39bfeb31b572728622579138c77ca9084b93fd586f2d51f3da86fac4a992aae814731fa567ceab9656c7aa
SSDEEP 3072:Dk8L/qRH3T1/gHB2QDJfl6evEFmu1Hljnb5et+2RH8:BL/q11gHBHDKevYmu1FkA
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

7105

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\fedonivapixer setapiwoledoto15\gimal.pdb

kernel32

QueryDosDeviceA SetCommBreak GetTickCount LoadLibraryW GetModuleFileNameW SetComputerNameExW CreateJobObjectA GetLogicalDriveStringsA GetLastError SetLastError GetProcAddress AttachConsole VirtualAlloc SetVolumeLabelW RemoveDirectoryA InterlockedDecrement WriteConsoleA LocalAlloc MoveFileA FindFirstVolumeMountPointW FindNextChangeNotification GlobalFindAtomW GetModuleHandleA GetConsoleTitleW GetFileAttributesExW FatalAppExitA GetCurrentProcessId AddConsoleAliasA DebugBreak DeleteFileA LoadLibraryA InterlockedIncrement MultiByteToWideChar GetStartupInfoW GetCPInfo GetACP GetOEMCP IsValidCodePage GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent Sleep HeapSize ExitProcess HeapFree WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetSystemTimeAsFileTime LCMapStringA WideCharToMultiByte LCMapStringW GetStringTypeA GetStringTypeW LeaveCriticalSection EnterCriticalSection GetLocaleInfoA HeapAlloc HeapReAlloc InitializeCriticalSectionAndSpinCount RtlUnwind RaiseException

advapi32

DeleteAce

Sharing

General

Malware Config

Signatures

File Explorer

fef1325325dc2115dc99a3c5b4148eb7df9a72b8233c695b364cb92bd3f3020a

kernel32

advapi32

generic