8680a71a54f5eb063aedc7d8922e031c

General

Target
8680a71a54f5eb063aedc7d8922e031c
Size 539KB
Sample240201-k69p5aaggp
SHA256 a56802a871f6e7b3a6b3dcd1eb2754517088b54d1de96171803afb4ef40b27d6
MD5 8680a71a54f5eb063aedc7d8922e031c
SHA1 c83551ddc80b71d1879b9b129aa6496eae70bd7b
SHA512 0a801c0b2846cd770b6df1b54744a2769e2ff257eee063d8322c255cb0877be639be24e14b9549777184caa831d2f6126622efab330e57ad735a7fca336036b3
SSDEEP 12288:BB4NW+jLF1MWRYunImuAs46T0cln34UN2:BUWcLF10uImuAsHYmnJN
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8680a71a54f5eb063aedc7d8922e031c

File Explorer

8680a71a54f5eb063aedc7d8922e031c

.exe 539KB

8680a71a54f5eb063aedc7d8922e031c

IMPHASH 2199146b92157385d0c13508b170af4c
SHA256 a56802a871f6e7b3a6b3dcd1eb2754517088b54d1de96171803afb4ef40b27d6
MD5 8680a71a54f5eb063aedc7d8922e031c
SHA1 c83551ddc80b71d1879b9b129aa6496eae70bd7b
SHA512 0a801c0b2846cd770b6df1b54744a2769e2ff257eee063d8322c255cb0877be639be24e14b9549777184caa831d2f6126622efab330e57ad735a7fca336036b3
SSDEEP 12288:BB4NW+jLF1MWRYunImuAs46T0cln34UN2:BUWcLF10uImuAsHYmnJN
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

350007

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\koxeraviy ruhucufiwube61\jokiwok.pdb

kernel32

EnterCriticalSection InterlockedExchangeAdd EraseTape GetUserDefaultLangID CreateActCtxW GetCPInfoExW WriteConsoleInputW ReadConsoleInputA InterlockedPopEntrySList SetConsoleDisplayMode CreateConsoleScreenBuffer VerifyVersionInfoA CreateFileW WritePrivateProfileSectionW GetPrivateProfileSectionW EnumDateFormatsExA CancelTimerQueueTimer LoadLibraryA FlushInstructionCache SetConsoleCP FindFirstVolumeA WriteFile BuildCommDCBW VerLanguageNameA SetFileApisToANSI WriteProcessMemory SetEvent GetExitCodeThread EndUpdateResourceA GetCPInfo GetLastError UpdateResourceA SetConsoleTitleW FindClose LoadLibraryExA CopyFileW GetConsoleAliasesLengthW ReadConsoleA ActivateActCtx AddRefActCtx HeapLock DnsHostnameToComputerNameA ReadConsoleOutputW GetProcessHeaps GetSystemWindowsDirectoryA GetUserDefaultLCID BuildCommDCBAndTimeoutsW HeapAlloc UnmapViewOfFile GetAtomNameW HeapSize GetGeoInfoW GetCurrentProcess VirtualProtect GetProcAddress GetModuleHandleA CreateThread GetVersionExW GetProcessAffinityMask WaitForSingleObject SetConsoleCursorInfo VerifyVersionInfoW WriteConsoleOutputCharacterA GetFileAttributesExA GetComputerNameA CommConfigDialogW GetConsoleAliasA GetConsoleWindow GetSystemTimeAsFileTime GetDiskFreeSpaceA InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection RaiseException RtlUnwind HeapReAlloc GetCommandLineA GetStartupInfoA UnhandledExceptionFilter SetUnhandledExceptionFilter HeapFree TerminateProcess IsDebuggerPresent GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc SetHandleCount GetStdHandle GetFileType SetFilePointer ExitProcess GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount SetStdHandle LCMapStringA LCMapStringW WriteConsoleA GetConsoleOutputCP WriteConsoleW FlushFileBuffers CreateFileA CloseHandle

user32

GetAltTabInfoA RealChildWindowFromPoint

Sharing

General

Malware Config

Signatures

File Explorer

8680a71a54f5eb063aedc7d8922e031c

kernel32

user32

generic