8e633fac863fd6ee78681458e6959601

General

Target
8e633fac863fd6ee78681458e6959601
Size 527KB
Sample240204-gn4vdabag4
SHA256 ed91c008bdd8bba792d23fdbcb9e5d4863397f8937c57d433dd3def1a4861c64
MD5 8e633fac863fd6ee78681458e6959601
SHA1 91975b53436668df7c32684b170458a9720b985c
SHA512 a70e4ba9dd48207433ea3b97b525b7e1f8205bd8e5ac571c46b76dbff983865872f03cd264e23bc1ccecfd89f32a4d55df60cbde72fac893329c0d67745f054f
SSDEEP 12288:GS1HKZkSWpOPdP1PjnOPRnfncgGa4Ymc30XZXS9iJFOv7VtE0AcIk:kZkSXofnpyBXhs0FOgc
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8e633fac863fd6ee78681458e6959601

File Explorer

8e633fac863fd6ee78681458e6959601

.exe 527KB

8e633fac863fd6ee78681458e6959601

IMPHASH d5cdc30877a202456bbe03f8e48575f4
SHA256 ed91c008bdd8bba792d23fdbcb9e5d4863397f8937c57d433dd3def1a4861c64
MD5 8e633fac863fd6ee78681458e6959601
SHA1 91975b53436668df7c32684b170458a9720b985c
SHA512 a70e4ba9dd48207433ea3b97b525b7e1f8205bd8e5ac571c46b76dbff983865872f03cd264e23bc1ccecfd89f32a4d55df60cbde72fac893329c0d67745f054f
SSDEEP 12288:GS1HKZkSWpOPdP1PjnOPRnfncgGa4Ymc30XZXS9iJFOv7VtE0AcIk:kZkSXofnpyBXhs0FOgc
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8160

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\geyeye\bujezus.pdb

kernel32

GetCommandLineW FileTimeToDosDateTime SetThreadContext GetNativeSystemInfo lstrlenA CopyFileExW TlsGetValue SetEndOfFile InterlockedIncrement GetCommState InterlockedDecrement GetSystemWindowsDirectoryW GetNamedPipeHandleStateA GlobalLock WaitForSingleObject SetEvent FreeEnvironmentStringsA GetTickCount VirtualFree GetConsoleAliasesLengthA GetSystemTimeAsFileTime WriteFile GetDriveTypeA GetPriorityClass GetPrivateProfileIntA LoadLibraryW GetConsoleMode GetVersionExW SetConsoleMode SetConsoleCursorPosition GetOverlappedResult GetStartupInfoW GetNamedPipeHandleStateW LCMapStringA GetFileSizeEx GetCPInfoExW GetLastError IsDBCSLeadByteEx SetLastError GetProcAddress CopyFileA GetPrivateProfileStringA LoadLibraryA OpenMutexA LocalAlloc IsSystemResumeAutomatic SetCurrentDirectoryW WriteProfileSectionW HeapWalk FindAtomA Process32NextW CreateIoCompletionPort FindFirstChangeNotificationA FreeEnvironmentStringsW EnumResourceNamesA CompareStringA FatalAppExitA GetCurrentThreadId SetThreadAffinityMask OpenSemaphoreW DeleteFileW ReadConsoleOutputCharacterW GetSystemTime UnhandledExceptionFilter SetUnhandledExceptionFilter HeapValidate IsBadReadPtr RaiseException GetModuleHandleW Sleep ExitProcess GetModuleFileNameA GetStdHandle TlsAlloc TlsSetValue TlsFree TerminateProcess GetCurrentProcess IsDebuggerPresent GetModuleFileNameW EnterCriticalSection LeaveCriticalSection DeleteCriticalSection QueryPerformanceCounter GetCurrentProcessId GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA HeapDestroy HeapCreate HeapFree HeapAlloc HeapSize HeapReAlloc VirtualAlloc GetACP GetOEMCP GetCPInfo IsValidCodePage InitializeCriticalSectionAndSpinCount RtlUnwind SetFilePointer WideCharToMultiByte GetConsoleCP DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP FlushFileBuffers CreateFileA CloseHandle GetModuleHandleA

user32

GetTitleBarInfo

winhttp

WinHttpReadData

Sharing

General

Malware Config

Signatures

File Explorer

8e633fac863fd6ee78681458e6959601

kernel32

user32

winhttp

generic