80ac5ab5e59eb23e369769b236deeec3

General

Target
80ac5ab5e59eb23e369769b236deeec3
Size 214KB
Sample240129-x7pgssagak
SHA256 8ac88b8f4f0bf982a6e1db43d806669b49f15e9532725eb4bebc9dbde491a49f
MD5 80ac5ab5e59eb23e369769b236deeec3
SHA1 815e028067311df3b2991be04b7032969e0a5376
SHA512 8807c0e8d9ba5a2f0aef6d971f9c205d05ef3d465a1f6abcb14d8ae4db812d56cbffaa04dfd8b759b81f1f662af4ad35f370f947cb5503f10dfa08935633024e
SSDEEP 3072:7mkv2SdIrCS5vm3/MSQZEAw00xmr02q8ku2QWJpx5UfQCDsI5/DuT61m:fvhdZcvA/Atq8kWVsI5/
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
80ac5ab5e59eb23e369769b236deeec3

File Explorer

80ac5ab5e59eb23e369769b236deeec3

.exe 214KB

80ac5ab5e59eb23e369769b236deeec3

IMPHASH 065a584d0d50807005a7c41fcb9adea6
SHA256 8ac88b8f4f0bf982a6e1db43d806669b49f15e9532725eb4bebc9dbde491a49f
MD5 80ac5ab5e59eb23e369769b236deeec3
SHA1 815e028067311df3b2991be04b7032969e0a5376
SHA512 8807c0e8d9ba5a2f0aef6d971f9c205d05ef3d465a1f6abcb14d8ae4db812d56cbffaa04dfd8b759b81f1f662af4ad35f370f947cb5503f10dfa08935633024e
SSDEEP 3072:7mkv2SdIrCS5vm3/MSQZEAw00xmr02q8ku2QWJpx5UfQCDsI5/DuT61m:fvhdZcvA/Atq8kWVsI5/
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

10707

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\genacokivup\mofigotunox\gexadawixahut\rope.pdb

kernel32

lstrlenA GetConsoleAliasesLengthW GetCPInfo GetDefaultCommConfigW HeapAlloc _lwrite InterlockedDecrement GetCurrentProcess SetMailslotInfo GetSystemWindowsDirectoryW SetEnvironmentVariableW GetUserDefaultLCID SetConsoleScreenBufferSize SetVolumeMountPointW GetConsoleAliasesLengthA GetCommandLineA GetEnvironmentStrings GetConsoleCP ReadConsoleInputA WriteConsoleOutputA GetVersionExW GetComputerNameExA lstrcpynW CreateTimerQueue LocalReAlloc HeapQueryInformation ReadFile GetModuleFileNameW ChangeTimerQueueTimer SetLastError GetProcAddress PeekConsoleInputW BeginUpdateResourceW VerLanguageNameA ResetEvent GetLocalTime LoadLibraryA GetCurrentConsoleFont GetConsoleTitleW BuildCommDCBA VirtualProtect GetFileAttributesExW FindFirstVolumeA ReleaseMutex GetVersion AddConsoleAliasA EnumCalendarInfoExA CreateThread CreateFileA GetFileAttributesW GetSystemDefaultLangID SetStdHandle WriteConsoleW InterlockedIncrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree TerminateProcess IsDebuggerPresent GetModuleHandleW ExitProcess GetStartupInfoA RtlUnwind RaiseException LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW WriteFile GetStdHandle GetModuleFileNameA HeapCreate VirtualFree VirtualAlloc HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA GetStringTypeW GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP

user32

RealGetWindowClassA GetCaretPos

Sharing

General

Malware Config

Signatures

File Explorer

80ac5ab5e59eb23e369769b236deeec3

kernel32

user32

generic