8975464d493a1669c83ad02d91f6fe64

General

Target
8975464d493a1669c83ad02d91f6fe64
Size 556KB
Sample240202-n7fp8afdek
SHA256 2884983044037369de29a626a68e63b23010e7840bc2af82f9f85510c283b597
MD5 8975464d493a1669c83ad02d91f6fe64
SHA1 95c6bfc9ad4b22b50481990996ff02fdf9cc96fa
SHA512 70e4d32fe728dc93cfa569e19dc5e5403a84c60aaba5f5d2cf139c90c9057e8b15e2dd7302bd32e407f7bf33eccad2ab834953b30603b55a4a3afea98c6bbe04
SSDEEP 12288:4RKZ84DAeXZwrASFo89C84pvsCIPAY0voZA3J2:4B4DA08t4pvs5ApQZA3J2
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8975464d493a1669c83ad02d91f6fe64

File Explorer

8975464d493a1669c83ad02d91f6fe64

.exe 556KB

8975464d493a1669c83ad02d91f6fe64

IMPHASH 15f5af8eb180c685d7e8c475dd6ce4a1
SHA256 2884983044037369de29a626a68e63b23010e7840bc2af82f9f85510c283b597
MD5 8975464d493a1669c83ad02d91f6fe64
SHA1 95c6bfc9ad4b22b50481990996ff02fdf9cc96fa
SHA512 70e4d32fe728dc93cfa569e19dc5e5403a84c60aaba5f5d2cf139c90c9057e8b15e2dd7302bd32e407f7bf33eccad2ab834953b30603b55a4a3afea98c6bbe04
SSDEEP 12288:4RKZ84DAeXZwrASFo89C84pvsCIPAY0voZA3J2:4B4DA08t4pvs5ApQZA3J2
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

5376

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\nomim\gagus\wojelu.pdb

kernel32

GetCommandLineW GetComputerNameA GetThreadContext EnumResourceNamesW UnregisterWait SetPriorityClass WriteConsoleInputW SetFilePointer lstrlenA GetConsoleAliasesLengthW GetQueuedCompletionStatus InterlockedDecrement WaitNamedPipeA CompareFileTime SetEnvironmentVariableW CreateDirectoryW GlobalLock OpenSemaphoreA FreeEnvironmentStringsA GetTickCount AddRefActCtx LoadLibraryW GetConsoleMode GetSystemWow64DirectoryW IsProcessorFeaturePresent CreateSemaphoreA IsDBCSLeadByte ReadFile GetModuleFileNameW CompareStringW LCMapStringA GetFileSizeEx GetStartupInfoA GetCPInfoExW OpenMutexW GetHandleInformation GetCurrentDirectoryW SetLastError GetProcAddress VirtualAlloc WriteProfileSectionA ReadFileEx CopyFileA GetPrivateProfileStringA ResetEvent LoadLibraryA OpenMutexA GetConsoleScreenBufferInfo LocalAlloc GetExitCodeThread SetCurrentDirectoryW PostQueuedCompletionStatus FindAtomA CreateIoCompletionPort HeapSetInformation GetConsoleCursorInfo FatalAppExitA GetVersionExA TlsAlloc FindAtomW GetSystemTime CopyFileExA GetStartupInfoW HeapValidate IsBadReadPtr RaiseException EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent DeleteCriticalSection QueryPerformanceCounter GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime GetModuleHandleW Sleep InterlockedIncrement ExitProcess FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType TlsGetValue TlsSetValue TlsFree GetLastError HeapDestroy HeapCreate HeapFree VirtualFree GetModuleFileNameA WriteFile HeapAlloc HeapSize HeapReAlloc GetACP GetOEMCP GetCPInfo IsValidCodePage RtlUnwind DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW MultiByteToWideChar InitializeCriticalSectionAndSpinCount WideCharToMultiByte LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers GetConsoleCP CloseHandle SetStdHandle WriteConsoleA GetConsoleOutputCP CreateFileA GetModuleHandleA

Sharing

General

Malware Config

Signatures

File Explorer

8975464d493a1669c83ad02d91f6fe64

kernel32

generic