d938ef8e52299d413f1bdb810c2267a4355e86a549dfbf9bb439f6420dd5cf04

Sharing

Copy URL Twitter E-mail

General

Target
d938ef8e52299d413f1bdb810c2267a4355e86a549dfbf9bb439f6420dd5cf04
Size 231KB
Sample240211-psv22aab86
SHA256 d938ef8e52299d413f1bdb810c2267a4355e86a549dfbf9bb439f6420dd5cf04
MD5 1e9fc57e2d3485ebf1a6644a102eec0f
SHA1 e05afe6f6cbade9f047da2aae7fabf2597d0c59a
SHA512 d04c73a2e87ddb83bb562e461a35d7ae789f28db29da6955b0177a057ca35c096e448087a466e507b62582df411047dc4cbe4a72461dca825b9698017fc60163
SSDEEP 3072:EsU0xrEjyAKH3BbOIFHKcsuaIeuIu0dq30JIdwUXM7U5dCOzpD:5ayAm1OIBMIIX0wEwQDz
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d938ef8e52299d413f1bdb810c2267a4355e86a549dfbf9bb439f6420dd5cf04

File Explorer

d938ef8e52299d413f1bdb810c2267a4355e86a549dfbf9bb439f6420dd5cf04

.exe 231KB

d938ef8e52299d413f1bdb810c2267a4355e86a549dfbf9bb439f6420dd5cf04

IMPHASH 40819eac709b0f1d71bde328f92ad7ce
SHA256 d938ef8e52299d413f1bdb810c2267a4355e86a549dfbf9bb439f6420dd5cf04
MD5 1e9fc57e2d3485ebf1a6644a102eec0f
SHA1 e05afe6f6cbade9f047da2aae7fabf2597d0c59a
SHA512 d04c73a2e87ddb83bb562e461a35d7ae789f28db29da6955b0177a057ca35c096e448087a466e507b62582df411047dc4cbe4a72461dca825b9698017fc60163
SSDEEP 3072:EsU0xrEjyAKH3BbOIFHKcsuaIeuIu0dq30JIdwUXM7U5dCOzpD:5ayAm1OIBMIIX0wEwQDz
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

9113

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\ciga_yijahagehogot zusicar toxucalabi.pdb

kernel32

GetLocaleInfoA GetConsoleAliasExesLengthA InterlockedDecrement GetLogicalDriveStringsW QueryDosDeviceA AddConsoleAliasW GetComputerNameW CreateDirectoryExA GetTickCount GetNumberFormatA GetUserDefaultLangID EnumResourceTypesA GlobalAlloc GetSystemDirectoryW GlobalFindAtomA LoadLibraryW AssignProcessToJobObject WriteConsoleW VerifyVersionInfoW FindResourceA GetProcAddress VirtualAlloc HeapSize RemoveDirectoryA SetComputerNameA SetFileApisToOEM LoadLibraryA CreateWaitableTimerW GetConsoleTitleW VirtualProtect GetFileAttributesExW DeleteFileW GetCurrentProcessId GetFileInformationByHandle GetVolumeInformationW SetLastError GetTempFileNameW FlushFileBuffers CloseHandle CreateFileA GetModuleHandleW Sleep ExitProcess GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId WriteFile GetStdHandle GetModuleFileNameA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType HeapCreate VirtualFree QueryPerformanceCounter GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage GetModuleHandleA RaiseException HeapAlloc HeapReAlloc RtlUnwind SetStdHandle WriteConsoleA GetConsoleOutputCP MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW

user32

EnableWindow CharUpperBuffW

advapi32

ReadEventLogA

ole32

CoMarshalHresult

winhttp

WinHttpCheckPlatform

Sharing

General

Malware Config

Signatures

File Explorer

d938ef8e52299d413f1bdb810c2267a4355e86a549dfbf9bb439f6420dd5cf04

kernel32

user32

advapi32

ole32

winhttp

generic