90f010da618f40fae0396974292a2744

General

Target
90f010da618f40fae0396974292a2744
Size 318KB
Sample240205-d6w1pshfa5
SHA256 56c8c31d18d56868c8f591e7f4945be1cf523daf6fe16d2bad113dc1d5f4259a
MD5 90f010da618f40fae0396974292a2744
SHA1 3a7ac4696b61146ea7e5b4398ce24603cfa4d7cb
SHA512 94fc831e1cc8b268d7e65544da8269105dcc0cf62298655a0df081b5ad216983cf544e5d5f7c645762252db4766baba2d11018629ba65fcd17545ce898ceca04
SSDEEP 6144:5sB8Y3Fth0WnZYzGJKbsyCfagT8oyLuXM4R0Hc+mkw:+lh0WnZvJ7yCCgTuuXDV
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
90f010da618f40fae0396974292a2744

File Explorer

90f010da618f40fae0396974292a2744

.exe 318KB

90f010da618f40fae0396974292a2744

IMPHASH 8bccdad7743fdd57e0a7b3bec87ab2cd
SHA256 56c8c31d18d56868c8f591e7f4945be1cf523daf6fe16d2bad113dc1d5f4259a
MD5 90f010da618f40fae0396974292a2744
SHA1 3a7ac4696b61146ea7e5b4398ce24603cfa4d7cb
SHA512 94fc831e1cc8b268d7e65544da8269105dcc0cf62298655a0df081b5ad216983cf544e5d5f7c645762252db4766baba2d11018629ba65fcd17545ce898ceca04
SSDEEP 6144:5sB8Y3Fth0WnZYzGJKbsyCfagT8oyLuXM4R0Hc+mkw:+lh0WnZvJ7yCCgTuuXDV
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

6336

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\puyuyis3\nuvap\58\sutiyuweden_nukep3 ral.pdb

kernel32

GetNativeSystemInfo FindFirstChangeNotificationW lstrlenA GetStringTypeA SetLocalTime FindResourceExW GetQueuedCompletionStatus InterlockedDecrement GetNamedPipeHandleStateA CancelWaitableTimer FreeEnvironmentStringsA GetModuleHandleW GetTickCount GetConsoleAliasesLengthA GetSystemTimeAsFileTime GetPrivateProfileStringW ReadConsoleW WriteFile SetCommState GetCommandLineA GetPriorityClass GlobalAlloc GetPrivateProfileIntA LoadLibraryW CopyFileW GetSystemWindowsDirectoryA GetConsoleAliasExesLengthW IsDBCSLeadByte GetFileSize GlobalUnlock LCMapStringA InterlockedExchange SetCurrentDirectoryA GetStartupInfoA GetCPInfoExW GetLastError ReadConsoleOutputCharacterA GetProcAddress VirtualAlloc WriteProfileSectionA ResetEvent LoadLibraryA CreateSemaphoreW IsSystemResumeAutomatic HeapWalk FindAtomA Process32NextW CreateIoCompletionPort FreeEnvironmentStringsW EnumResourceNamesA GetCurrentThreadId SetThreadAffinityMask TlsAlloc FindAtomW DeleteFileW CopyFileExA GetStartupInfoW EnumResourceNamesW MultiByteToWideChar HeapValidate IsBadReadPtr RaiseException LeaveCriticalSection EnterCriticalSection SetStdHandle GetFileType WideCharToMultiByte GetConsoleCP GetConsoleMode DeleteCriticalSection GetModuleFileNameW InterlockedIncrement GetACP GetOEMCP GetCPInfo IsValidCodePage TlsGetValue TlsSetValue TlsFree SetLastError UnhandledExceptionFilter SetUnhandledExceptionFilter QueryPerformanceCounter GetCurrentProcessId Sleep ExitProcess GetEnvironmentStringsW GetCommandLineW SetHandleCount GetStdHandle HeapDestroy HeapCreate HeapFree VirtualFree GetModuleFileNameA HeapAlloc TerminateProcess GetCurrentProcess IsDebuggerPresent HeapSize HeapReAlloc InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP WriteConsoleW SetFilePointer RtlUnwind DebugBreak OutputDebugStringA OutputDebugStringW LCMapStringW GetStringTypeW GetLocaleInfoA CreateFileA CloseHandle FlushFileBuffers GetModuleHandleA

advapi32

InitiateSystemShutdownA

winhttp

WinHttpReadData

Sharing

General

Malware Config

Signatures

File Explorer

90f010da618f40fae0396974292a2744

kernel32

advapi32

winhttp

generic