88f6da211785d596af90571265f5cd62

General

Target
88f6da211785d596af90571265f5cd62
Size 493KB
Sample240202-jpfkaabchp
SHA256 70dbf04d21096d4275b351c6209290e2f8b12299224ef26cefbe97579ca8d201
MD5 88f6da211785d596af90571265f5cd62
SHA1 999643fcbc76e120d2824b66d45d75bbb009a764
SHA512 9924a2c7ac08a72ffaf7a69b4fd73d80cf7400bc2f5432d8d486c56129bfcd5092db0d6ff6aafca1346e582c50e77e05b3a0edf873e863d35c29b9be4b2b6354
SSDEEP 6144:Y/MynBEM5cH+DFVLGwP0tcBm+6BOQ/ExOGavAku5wJUFdhLjTSdji7knGyHM:Y/MyBh5jFbvc1IQsxOGHkpJUF/PmiI
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
88f6da211785d596af90571265f5cd62

File Explorer

88f6da211785d596af90571265f5cd62

.exe 493KB

88f6da211785d596af90571265f5cd62

IMPHASH aa13d15d6dd2e094d4aa7be42a7367ea
SHA256 70dbf04d21096d4275b351c6209290e2f8b12299224ef26cefbe97579ca8d201
MD5 88f6da211785d596af90571265f5cd62
SHA1 999643fcbc76e120d2824b66d45d75bbb009a764
SHA512 9924a2c7ac08a72ffaf7a69b4fd73d80cf7400bc2f5432d8d486c56129bfcd5092db0d6ff6aafca1346e582c50e77e05b3a0edf873e863d35c29b9be4b2b6354
SSDEEP 6144:Y/MynBEM5cH+DFVLGwP0tcBm+6BOQ/ExOGavAku5wJUFdhLjTSdji7knGyHM:Y/MyBh5jFbvc1IQsxOGHkpJUF/PmiI
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

7160

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\fadifay naguhib20 kebogujipilen\gav_funohufipu.pdb

kernel32

lstrlenA GetConsoleAliasesLengthW MoveFileExA InterlockedDecrement ReadConsoleOutputAttribute GetProfileStringW GetUserDefaultLCID WaitForSingleObject SetConsoleScreenBufferSize GetComputerNameW SetEvent IsBadReadPtr ReadConsoleOutputA GetUserDefaultLangID GetVolumePathNameW GetConsoleCP LocalShrink GetSystemWindowsDirectoryA InterlockedPopEntrySList LeaveCriticalSection GetFileAttributesA lstrcpynW GetConsoleAliasW VerifyVersionInfoA WriteConsoleW WritePrivateProfileSectionW ReadFile CreateFileW CreateActCtxA GetACP VerifyVersionInfoW SetLastError GetProcAddress PeekConsoleInputW EnumDateFormatsExA GetConsoleDisplayMode EnterCriticalSection GetProcessId LocalAlloc DeleteTimerQueue SetCalendarInfoW DnsHostnameToComputerNameA CreateTapePartition SetFileApisToANSI GlobalGetAtomNameW SetSystemTime SetEnvironmentVariableA SetConsoleTitleW GetModuleHandleA lstrcatW UpdateResourceW CancelTimerQueueTimer GetConsoleTitleW BuildCommDCBA VirtualProtect EndUpdateResourceA GetVersionExA FindFirstVolumeW UnhandledExceptionFilter SetUnhandledExceptionFilter GetCommandLineA GetStartupInfoA GetModuleHandleW Sleep ExitProcess GetLastError WriteFile GetStdHandle GetModuleFileNameA HeapAlloc FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime TerminateProcess GetCurrentProcess IsDebuggerPresent LoadLibraryA InitializeCriticalSectionAndSpinCount RaiseException VirtualAlloc HeapReAlloc GetCPInfo GetOEMCP IsValidCodePage RtlUnwind HeapSize GetLocaleInfoA LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW

user32

RealGetWindowClassW

Sharing

General

Malware Config

Signatures

File Explorer

88f6da211785d596af90571265f5cd62

kernel32

user32

generic