9083279745cbee066a515c1cc088c0c5

General

Target
9083279745cbee066a515c1cc088c0c5
Size 394KB
Sample240205-adbmhsgafl
SHA256 450f10b6e404c311cc0983ee3a263f8f6a75e0a444b1b4214ae541ba475ae618
MD5 9083279745cbee066a515c1cc088c0c5
SHA1 60050364a18eea1f684dfd3020560cefb08b5d18
SHA512 a1b2048f5313c55752800ffe4359f3bce6239937f740808936ce3ee4c480384a2ddb0e95320d00a5a4c614a45cd5e284a1fef92c54ddd33de0659ee3553afc2a
SSDEEP 6144:Cl1ULp12sLrOsKEmW5xjZSv5yIanX59EPCmK:w1UF12snOvWTgvfaX59Y
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9083279745cbee066a515c1cc088c0c5

File Explorer

9083279745cbee066a515c1cc088c0c5

.exe 394KB

9083279745cbee066a515c1cc088c0c5

IMPHASH 7449bb1bd2f7cf11b31b665cb048bd37
SHA256 450f10b6e404c311cc0983ee3a263f8f6a75e0a444b1b4214ae541ba475ae618
MD5 9083279745cbee066a515c1cc088c0c5
SHA1 60050364a18eea1f684dfd3020560cefb08b5d18
SHA512 a1b2048f5313c55752800ffe4359f3bce6239937f740808936ce3ee4c480384a2ddb0e95320d00a5a4c614a45cd5e284a1fef92c54ddd33de0659ee3553afc2a
SSDEEP 6144:Cl1ULp12sLrOsKEmW5xjZSv5yIanX59EPCmK:w1UF12snOvWTgvfaX59Y
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

17442

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\wevahexef57\mofahijusig.pdb

kernel32

HeapReAlloc SetLocalTime EndUpdateResourceW InterlockedIncrement GetCurrentProcess GetSystemWindowsDirectoryW SetEnvironmentVariableW GetEnvironmentStringsW WaitForSingleObject AddConsoleAliasW SetVolumeMountPointW EnumCalendarInfoExW ReadConsoleW WriteFile GetUserDefaultLangID GetEnvironmentStrings GlobalAlloc WriteConsoleOutputA GetVersionExW lstrcpynW PulseEvent VerifyVersionInfoA HeapQueryInformation GetModuleFileNameW GetACP LCMapStringA GetProcAddress GetComputerNameExW VerLanguageNameA CreateTimerQueueTimer FreeUserPhysicalPages EnterCriticalSection GetDefaultCommConfigA GetModuleHandleA QueueUserWorkItem GetConsoleTitleW VirtualProtect PeekConsoleInputA GetCPInfoExA ReadConsoleInputW FindNextVolumeA CreateThread GetCommandLineW WideCharToMultiByte InterlockedDecrement InterlockedCompareExchange InterlockedExchange MultiByteToWideChar Sleep InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree TerminateProcess IsDebuggerPresent GetStartupInfoW GetCPInfo RtlUnwind RaiseException LCMapStringW GetStringTypeW GetModuleHandleW ExitProcess GetStdHandle GetModuleFileNameA HeapAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc HeapSize FreeEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetStringTypeA GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale LoadLibraryA InitializeCriticalSectionAndSpinCount GetLocaleInfoW GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle CreateFileA

user32

RealGetWindowClassW

Sharing

General

Malware Config

Signatures

File Explorer

9083279745cbee066a515c1cc088c0c5

kernel32

user32

generic