7e3972e83ae160b34c56d12e0a28f8bf

General

Target
7e3972e83ae160b34c56d12e0a28f8bf
Size 419KB
Sample240128-2wfsqscbb7
SHA256 f6a0a9432b452c28d342ffdd64aa7f351339569b93c8f9fa34815fe8b56ec6c0
MD5 7e3972e83ae160b34c56d12e0a28f8bf
SHA1 ba1acc4cccf1f5006d9bd19038ad0f2c33aa5d07
SHA512 ea943e26147f4024d2e4e43ecdb00728a2529be1082aa11b598f9ae280fc4673be70886fc463325f6dfff73049c72c88f3ff01b2880e1ae289947b95d1566265
SSDEEP 12288:7mElxltNebSSVIrIPN5L0XRA3QdK5RigCGFxaeFc:7XzebnVQQNV0XOuK5ogtF5
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7e3972e83ae160b34c56d12e0a28f8bf

File Explorer

7e3972e83ae160b34c56d12e0a28f8bf

.exe 419KB

7e3972e83ae160b34c56d12e0a28f8bf

IMPHASH aa21a6d00a5d2896042e00aa2e960393
SHA256 f6a0a9432b452c28d342ffdd64aa7f351339569b93c8f9fa34815fe8b56ec6c0
MD5 7e3972e83ae160b34c56d12e0a28f8bf
SHA1 ba1acc4cccf1f5006d9bd19038ad0f2c33aa5d07
SHA512 ea943e26147f4024d2e4e43ecdb00728a2529be1082aa11b598f9ae280fc4673be70886fc463325f6dfff73049c72c88f3ff01b2880e1ae289947b95d1566265
SSDEEP 12288:7mElxltNebSSVIrIPN5L0XRA3QdK5RigCGFxaeFc:7XzebnVQQNV0XOuK5ogtF5
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8733

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\lazi nahowizeserune-jufemuvucewic.pdb

kernel32

lstrlenA GetCPInfo GetDefaultCommConfigW HeapAlloc _lwrite InterlockedDecrement GetCurrentProcess GetSystemWindowsDirectoryW GetUserDefaultLCID SetVolumeMountPointW GetCommandLineA GetEnvironmentStrings GlobalAlloc ReadConsoleInputA WriteConsoleOutputA GetVersionExW GetComputerNameExA lstrcpynW LocalReAlloc HeapQueryInformation ReadFile VerifyVersionInfoW GetCPInfoExW ChangeTimerQueueTimer GetProcAddress AttachConsole PeekConsoleInputW VerLanguageNameA FreeUserPhysicalPages GetLocalTime LoadLibraryA BeginUpdateResourceA GetCurrentConsoleFont SetEnvironmentVariableA GetConsoleTitleW BuildCommDCBA VirtualProtect FindFirstVolumeA ReleaseMutex GetVersion AddConsoleAliasA EnumCalendarInfoExA LCMapStringW CreateThread CreateFileA SetStdHandle CreateTimerQueue GetModuleFileNameW GetSystemDefaultLangID WriteConsoleW GetConsoleOutputCP WideCharToMultiByte InterlockedIncrement InterlockedExchange MultiByteToWideChar Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree TerminateProcess IsDebuggerPresent GetModuleHandleW ExitProcess GetStartupInfoA RtlUnwind RaiseException LCMapStringA GetStringTypeW WriteFile GetStdHandle GetModuleFileNameA HeapCreate VirtualFree VirtualAlloc HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetStringTypeA HeapSize GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA

user32

RealGetWindowClassA GetCaretPos

Sharing

General

Malware Config

Signatures

File Explorer

7e3972e83ae160b34c56d12e0a28f8bf

kernel32

user32

generic