afae689db4647816141e544656ce071b4b3622f63ecdc9b2f770d2f748549d06

Sharing

Copy URL Twitter E-mail

General

Target
afae689db4647816141e544656ce071b4b3622f63ecdc9b2f770d2f748549d06
Size 232KB
Sample240211-ql2fxage3s
SHA256 afae689db4647816141e544656ce071b4b3622f63ecdc9b2f770d2f748549d06
MD5 70da4a03ccb7c529e7d75891ebc77f62
SHA1 499067042b3a5375de904ed0b686c9c0714895cc
SHA512 fb09ac28de7437871b2aac209526bf008c9b6ab1dbdae3fcfbe0eda19916e7a47e65146b32ebded4856f9838c09b50cdfe67cbe7d81b53d06187edd82e377bd1
SSDEEP 3072:XXJUQxrEch7WdYmNM6rebQjamwUKxKMr4DNx1s9JXM0f5c/YPP:XT5hSdYmibmwUi+a3y
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
afae689db4647816141e544656ce071b4b3622f63ecdc9b2f770d2f748549d06

File Explorer

afae689db4647816141e544656ce071b4b3622f63ecdc9b2f770d2f748549d06

.exe 232KB

afae689db4647816141e544656ce071b4b3622f63ecdc9b2f770d2f748549d06

IMPHASH 63fbd33cf4b705e9ce0b5af578a99fd8
SHA256 afae689db4647816141e544656ce071b4b3622f63ecdc9b2f770d2f748549d06
MD5 70da4a03ccb7c529e7d75891ebc77f62
SHA1 499067042b3a5375de904ed0b686c9c0714895cc
SHA512 fb09ac28de7437871b2aac209526bf008c9b6ab1dbdae3fcfbe0eda19916e7a47e65146b32ebded4856f9838c09b50cdfe67cbe7d81b53d06187edd82e377bd1
SSDEEP 3072:XXJUQxrEch7WdYmNM6rebQjamwUKxKMr4DNx1s9JXM0f5c/YPP:XT5hSdYmibmwUi+a3y
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

9113

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\voturerif gitayiguvus_70\kejapozuloyitu\hal yojutapo_wejiratu.pdb

kernel32

FindResourceA GetLocaleInfoA GetConsoleAliasExesLengthA InterlockedDecrement GetLogicalDriveStringsW QueryDosDeviceA AddConsoleAliasW CreateDirectoryExA GetTickCount GetNumberFormatA GetUserDefaultLangID EnumResourceTypesA GlobalAlloc GetSystemDirectoryW GlobalFindAtomA LoadLibraryW AssignProcessToJobObject WriteConsoleW VerifyVersionInfoW GetTempFileNameW GetProcAddress VirtualAlloc HeapSize RemoveDirectoryA SetComputerNameA SetFileApisToOEM LoadLibraryA CreateWaitableTimerW GetConsoleTitleW VirtualProtect GetFileAttributesExW GetCurrentProcessId GetFileInformationByHandle DeleteFileA GetVolumeInformationW SetLastError GetComputerNameA FlushFileBuffers CloseHandle CreateFileA GetModuleHandleW Sleep ExitProcess GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId WriteFile GetStdHandle GetModuleFileNameA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType HeapCreate VirtualFree QueryPerformanceCounter GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage GetModuleHandleA RaiseException HeapAlloc HeapReAlloc RtlUnwind SetStdHandle WriteConsoleA GetConsoleOutputCP MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW

user32

EnableWindow CharUpperBuffW

advapi32

ReadEventLogA

ole32

CoMarshalHresult

winhttp

WinHttpCheckPlatform

Sharing

General

Malware Config

Signatures

File Explorer

afae689db4647816141e544656ce071b4b3622f63ecdc9b2f770d2f748549d06

kernel32

user32

advapi32

ole32

winhttp

generic