7fcf9bd5374911a303fba1d9cddb1bf9

General

Target
7fcf9bd5374911a303fba1d9cddb1bf9
Size 314KB
Sample240129-pe115aahgj
SHA256 bf58975025eb83f63526c5ae3a9e30ba1a32099c80b34df5b2abeb3bb2cd76d8
MD5 7fcf9bd5374911a303fba1d9cddb1bf9
SHA1 b2b65efbc496f75aff2ee6ee81f76ac227fbef73
SHA512 a2421ac215a93eaf2e8cd363a0431e5a81da79a4a3e31495d66e2b0e17f745b4c81d113f8e513188c22e8396085e1fbde161ed1fe9eed3961d5f63c876600119
SSDEEP 6144:ZjDc2bcew3+4HZRrKW/2RNQxKDTPDauBsj9wG9nWBfO:xDc2bceQ+4HDrK62/8KXDkjiGl0f
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7fcf9bd5374911a303fba1d9cddb1bf9

File Explorer

7fcf9bd5374911a303fba1d9cddb1bf9

.exe 314KB

7fcf9bd5374911a303fba1d9cddb1bf9

IMPHASH b2c249fef864036a8cc857592c5ce556
SHA256 bf58975025eb83f63526c5ae3a9e30ba1a32099c80b34df5b2abeb3bb2cd76d8
MD5 7fcf9bd5374911a303fba1d9cddb1bf9
SHA1 b2b65efbc496f75aff2ee6ee81f76ac227fbef73
SHA512 a2421ac215a93eaf2e8cd363a0431e5a81da79a4a3e31495d66e2b0e17f745b4c81d113f8e513188c22e8396085e1fbde161ed1fe9eed3961d5f63c876600119
SSDEEP 6144:ZjDc2bcew3+4HZRrKW/2RNQxKDTPDauBsj9wG9nWBfO:xDc2bceQ+4HDrK62/8KXDkjiGl0f
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8446

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\ticuzok\kiyih_14\kiyikegip\kas.pdb

kernel32

UnmapViewOfFile lstrcpynA GetDefaultCommConfigW ReadConsoleA InterlockedDecrement GetEnvironmentStringsW GetUserDefaultLCID SetVolumeMountPointW GetSystemDefaultLCID GetEnvironmentStrings InitializeCriticalSectionAndSpinCount GetSystemWindowsDirectoryA LeaveCriticalSection GetComputerNameExA GetAtomNameW ReadFile GetACP LCMapStringA VerifyVersionInfoW InterlockedExchange GetProcAddress PeekConsoleInputW VerLanguageNameA CopyFileA GetLocalTime WriteConsoleA LocalAlloc SetConsoleOutputCP Module32FirstW SetEnvironmentVariableA GetModuleFileNameA GetModuleHandleA QueueUserWorkItem GetConsoleTitleW ReadConsoleInputW GetCurrentProcessId AddConsoleAliasA EnumCalendarInfoExA FindNextVolumeA PulseEvent GetCommandLineW UnhandledExceptionFilter SetUnhandledExceptionFilter GetCommandLineA GetStartupInfoA GetModuleHandleW Sleep ExitProcess GetLastError WriteFile GetStdHandle TerminateProcess GetCurrentProcess IsDebuggerPresent TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId EnterCriticalSection HeapSize SetHandleCount GetFileType DeleteCriticalSection SetFilePointer FreeEnvironmentStringsA FreeEnvironmentStringsW WideCharToMultiByte HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime LoadLibraryA GetConsoleCP GetConsoleMode GetCPInfo GetOEMCP IsValidCodePage RaiseException MultiByteToWideChar RtlUnwind HeapAlloc HeapReAlloc VirtualAlloc SetStdHandle FlushFileBuffers GetLocaleInfoA GetConsoleOutputCP WriteConsoleW LCMapStringW GetStringTypeA GetStringTypeW CreateFileA CloseHandle

gdi32

GetCharWidthFloatW

Sharing

General

Malware Config

Signatures

File Explorer

7fcf9bd5374911a303fba1d9cddb1bf9

kernel32

gdi32

generic