90bb9c273f6cb7242eaa347f863d1eef

General

Target
90bb9c273f6cb7242eaa347f863d1eef
Size 570KB
Sample240205-cdgjwahher
SHA256 d64ef977f987acea932618522d714ecf52e3750e791f1b4fd89d59c3dd0f0b50
MD5 90bb9c273f6cb7242eaa347f863d1eef
SHA1 4f5f9491b84c1a5e84d26433014d18a176194893
SHA512 30632d6384979238b39b07fef699563d7b8335279df465302cca802f67478bbdfebae34c7cb62691cc1543aef1d8a9d42ef2b39c5b1cf0e6e7b94f99072e07d6
SSDEEP 12288:QzYCqtUatD8VPnjZndxW81s+qEyetlSYm8lX8OaNWxNH5UKZi:UL0Uaylx+WoYvB8OsWxNZ/Zi
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
90bb9c273f6cb7242eaa347f863d1eef

File Explorer

90bb9c273f6cb7242eaa347f863d1eef

.exe 570KB

90bb9c273f6cb7242eaa347f863d1eef

IMPHASH 62f5ddafa2c16d26eaa8112b2787e21c
SHA256 d64ef977f987acea932618522d714ecf52e3750e791f1b4fd89d59c3dd0f0b50
MD5 90bb9c273f6cb7242eaa347f863d1eef
SHA1 4f5f9491b84c1a5e84d26433014d18a176194893
SHA512 30632d6384979238b39b07fef699563d7b8335279df465302cca802f67478bbdfebae34c7cb62691cc1543aef1d8a9d42ef2b39c5b1cf0e6e7b94f99072e07d6
SSDEEP 12288:QzYCqtUatD8VPnjZndxW81s+qEyetlSYm8lX8OaNWxNH5UKZi:UL0Uaylx+WoYvB8OsWxNZ/Zi
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8400

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\bitudaju-hamoyoyu\wololuhunojaba\2.pdb

kernel32

GetComputerNameA EnumResourceNamesW UnregisterWait SetPriorityClass WriteConsoleInputW SetFilePointer GetConsoleAliasesLengthW InterlockedIncrement InterlockedDecrement WaitNamedPipeA CompareFileTime SetEnvironmentVariableW CreateDirectoryW GlobalLock SetEvent FreeEnvironmentStringsA GetTickCount GetCommandLineA GlobalAlloc AddRefActCtx LoadLibraryW GetSystemWow64DirectoryW IsProcessorFeaturePresent CreateSemaphoreA ReadFile GetModuleFileNameW CompareStringW lstrlenW LCMapStringA GetFileSizeEx GetStartupInfoA OpenMutexW GetHandleInformation GetCurrentDirectoryW SetLastError GetProcAddress VirtualAlloc WriteProfileSectionA ReadFileEx CopyFileA GetPrivateProfileStringA LoadLibraryA OpenMutexA GetConsoleScreenBufferInfo GetExitCodeThread SetCurrentDirectoryW PostQueuedCompletionStatus FindAtomA CreateIoCompletionPort HeapSetInformation GetConsoleCursorInfo FatalAppExitA GetCPInfoExA OpenSemaphoreW GetVersionExA TlsAlloc GetSystemTime CopyFileExA GetLastError MoveFileA HeapValidate IsBadReadPtr RaiseException EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind GetACP GetOEMCP GetCPInfo IsValidCodePage TlsGetValue GetModuleHandleW TlsSetValue GetCurrentThreadId TlsFree Sleep ExitProcess SetHandleCount GetStdHandle GetFileType DeleteCriticalSection QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapDestroy HeapCreate HeapFree VirtualFree WriteFile HeapAlloc HeapSize HeapReAlloc DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA LCMapStringW InitializeCriticalSectionAndSpinCount FlushFileBuffers GetConsoleCP GetConsoleMode CloseHandle SetStdHandle WriteConsoleA GetConsoleOutputCP CreateFileA GetModuleHandleA

Sharing

General

Malware Config

Signatures

File Explorer

90bb9c273f6cb7242eaa347f863d1eef

kernel32

generic