5fa7ad590c3cd426256d9d566a763d82[.]exe

General

Target
5fa7ad590c3cd426256d9d566a763d82.exe
Size 302KB
Sample240205-lrmgqachd6
SHA256 705efe0949189673f83b5853e8fe358a4eb96d28e778194a36125edcd997cd24
MD5 5fa7ad590c3cd426256d9d566a763d82
SHA1 6256656e428c7cae579165d5be254493257cfdbc
SHA512 0591521dd3f2bf7167df7945b4b6dca3ff46f49a26b080cd4f8c0cde7c35875bffa336e4afd5675b8b2d9808b5db3068cdf4aae2a0fb9efed088db10313b0c94
SSDEEP 6144:WiRLDkKDijJm8CR2ftW+2UcRTJyrtRYkM+:WcPkKDijJmH2ftW+d8u
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5fa7ad590c3cd426256d9d566a763d82.exe

File Explorer

5fa7ad590c3cd426256d9d566a763d82.exe

.exe 302KB

5fa7ad590c3cd426256d9d566a763d82.exe

IMPHASH 6f6e66c83b55c41c6909219f9159d382
SHA256 705efe0949189673f83b5853e8fe358a4eb96d28e778194a36125edcd997cd24
MD5 5fa7ad590c3cd426256d9d566a763d82
SHA1 6256656e428c7cae579165d5be254493257cfdbc
SHA512 0591521dd3f2bf7167df7945b4b6dca3ff46f49a26b080cd4f8c0cde7c35875bffa336e4afd5675b8b2d9808b5db3068cdf4aae2a0fb9efed088db10313b0c94
SSDEEP 6144:WiRLDkKDijJm8CR2ftW+2UcRTJyrtRYkM+:WcPkKDijJmH2ftW+d8u
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8783

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\xuxez\zawipuzojesoc\tihumaxecepo\buseyo\wedadunur\kih.pdb

kernel32

SetComputerNameExA SetWaitableTimer InterlockedIncrement GetModuleHandleW GetTickCount FindNextVolumeMountPointA ReadConsoleW EnumResourceTypesA TlsSetValue GetVolumeInformationA LoadLibraryW SetCommConfig AssignProcessToJobObject GetNamedPipeInfo GetModuleFileNameW CreateJobObjectA InterlockedExchange GetLogicalDriveStringsA SetVolumeLabelA GetProcAddress VirtualAlloc RemoveDirectoryA LoadLibraryA OpenMutexA LocalAlloc MoveFileA GetNumberFormatW GlobalFindAtomW GetConsoleTitleW VirtualProtect GetFileAttributesExW GetCurrentProcessId AddConsoleAliasA ReadConsoleOutputCharacterW DeleteFileA GetLastError GetSystemDefaultLangID UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW TerminateProcess GetCurrentProcess IsDebuggerPresent EnterCriticalSection LeaveCriticalSection HeapFree Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection TlsGetValue TlsAlloc TlsFree SetLastError GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage GetModuleHandleA RaiseException RtlUnwind HeapAlloc HeapReAlloc InitializeCriticalSectionAndSpinCount SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers HeapSize CreateFileA CloseHandle

user32

LoadMenuW

gdi32

GetCharABCWidthsFloatW

Sharing