8211949786137560be90cbc71a7720b2

General

Target
8211949786137560be90cbc71a7720b2
Size 484KB
Sample240130-lc826sdae5
SHA256 0fb7ffc5ccc6a4250153508f8af38b9f70aa06516164c441aa2ef81cf1289cd5
MD5 8211949786137560be90cbc71a7720b2
SHA1 48ad5da16021524149c6fcc22c2b81d7c605da52
SHA512 39eaa27741f2d2099ece6ca29438efb89724a1a0667f6d2047dd572a2198baca4ea8b0e1d7bc524a8cada8256a5d1ad3884185b4856014bfd814ab952b6e94c7
SSDEEP 6144:m845EYNdTlcoBhCU4AT/2lC7gt/Jv0VV/TYvn8WNRolclHGOAx:WyoBhCU4NlCUt/t0b/TYvn8EH3A
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8211949786137560be90cbc71a7720b2

File Explorer

8211949786137560be90cbc71a7720b2

.exe 484KB

8211949786137560be90cbc71a7720b2

IMPHASH dc9414fe32ad240ba5f174dde5fa215d
SHA256 0fb7ffc5ccc6a4250153508f8af38b9f70aa06516164c441aa2ef81cf1289cd5
MD5 8211949786137560be90cbc71a7720b2
SHA1 48ad5da16021524149c6fcc22c2b81d7c605da52
SHA512 39eaa27741f2d2099ece6ca29438efb89724a1a0667f6d2047dd572a2198baca4ea8b0e1d7bc524a8cada8256a5d1ad3884185b4856014bfd814ab952b6e94c7
SSDEEP 6144:m845EYNdTlcoBhCU4AT/2lC7gt/Jv0VV/TYvn8WNRolclHGOAx:WyoBhCU4NlCUt/t0b/TYvn8EH3A
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

31346

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\gunuyurarewu\5_nitanejecu\mawupakorej20 xamifabuyal.pdb

kernel32

GetComputerNameA CreateFileA SetCriticalSectionSpinCount WriteConsoleInputW WriteConsoleOutputCharacterW lstrlenA GetConsoleAliasesLengthW EndUpdateResourceW ReadConsoleA GetCurrentProcess ZombifyActCtx InitializeSListHead GetUserDefaultLCID WaitForSingleObject SetEvent GetSystemDefaultLCID GetFileAttributesExA GetModuleHandleW VirtualFree GetGeoInfoW ReadConsoleOutputA GetConsoleCP GlobalFindAtomA LoadLibraryW ReadConsoleInputA GetSystemWindowsDirectoryA SetConsoleCP LeaveCriticalSection DnsHostnameToComputerNameW GetConsoleAliasW SetConsoleCursorPosition ReadFile CreateActCtxA GetConsoleOutputCP VerifyVersionInfoW SetLastError GetProcAddress VerLanguageNameA EnumDateFormatsExA HeapUnlock CopyFileA GetConsoleDisplayMode LoadLibraryA WriteConsoleA InterlockedExchangeAdd DeleteTimerQueue CreateTapePartition BuildCommDCBAndTimeoutsW SetConsoleDisplayMode GetExitCodeThread SetFileApisToANSI GetDiskFreeSpaceA SetConsoleTitleW UpdateResourceW GetProcessAffinityMask BuildCommDCBA VirtualProtect GetFileTime GetCPInfoExA FindFirstVolumeA GetVersionExA GetPrivateProfileSectionW GetSystemTime CreateThread CloseHandle InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree TerminateProcess IsDebuggerPresent HeapReAlloc HeapAlloc GetCommandLineA GetStartupInfoA RtlUnwind RaiseException LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetCPInfo ExitProcess WriteFile GetStdHandle GetModuleFileNameA HeapCreate VirtualAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId SetHandleCount GetFileType SetFilePointer FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetACP GetOEMCP IsValidCodePage GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeA GetStringTypeW InitializeCriticalSectionAndSpinCount SetStdHandle GetConsoleMode FlushFileBuffers GetLocaleInfoW WriteConsoleW

user32

GetAltTabInfoW RealChildWindowFromPoint

Sharing

General

Malware Config

Signatures

File Explorer

8211949786137560be90cbc71a7720b2

kernel32

user32

generic