963df9f6c9c48201ec3ac9d8314db41d

General

Target
963df9f6c9c48201ec3ac9d8314db41d
Size 580KB
Sample240212-e1wy7ahd7z
SHA256 a14b4c3dcd55ae00060563aa6b0e836b5fe8518048f2fba7fbaf070ce9a9d914
MD5 963df9f6c9c48201ec3ac9d8314db41d
SHA1 4f3ba0cc7c38121c5482b5c27bf764c9e3f31a66
SHA512 3abbab48070dd7a559e0f9b528add7b22231e8f0ef639744e2b88b371b63767e658f743dc9c8d4f1dcee62447f38098c3444edbe810b108b6d387af329cb1321
SSDEEP 12288:J8umSNwOM86usjfAI1AwlF78em/OoJxgnOt7I7i+QTjcptE8To:JjwOM86usj7l2em/OoPcKNjcHE6o
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
963df9f6c9c48201ec3ac9d8314db41d

File Explorer

963df9f6c9c48201ec3ac9d8314db41d

.exe 580KB

963df9f6c9c48201ec3ac9d8314db41d

IMPHASH ca59243ab9216853b8ca72d3a7c666db
SHA256 a14b4c3dcd55ae00060563aa6b0e836b5fe8518048f2fba7fbaf070ce9a9d914
MD5 963df9f6c9c48201ec3ac9d8314db41d
SHA1 4f3ba0cc7c38121c5482b5c27bf764c9e3f31a66
SHA512 3abbab48070dd7a559e0f9b528add7b22231e8f0ef639744e2b88b371b63767e658f743dc9c8d4f1dcee62447f38098c3444edbe810b108b6d387af329cb1321
SSDEEP 12288:J8umSNwOM86usjfAI1AwlF78em/OoJxgnOt7I7i+QTjcptE8To:JjwOM86usj7l2em/OoPcKNjcHE6o
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8848

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\wamoloxina\doloketo70_tixobise7.pdb

kernel32

SetFilePointer lstrlenA FindResourceExW MapUserPhysicalPages FreeLibrary InterlockedIncrement GetCommState InterlockedDecrement ZombifyActCtx SetFirmwareEnvironmentVariableA GetSystemWindowsDirectoryW GetNamedPipeHandleStateA GlobalLock GetComputerNameW FreeEnvironmentStringsA GetProcessPriorityBoost GetTickCount GetCommConfig GetConsoleAliasesLengthA GetWindowsDirectoryA GetConsoleAliasExesW WriteFile TlsSetValue GetEnvironmentStrings GlobalAlloc LoadLibraryW _hread GetCalendarInfoA GetSystemWow64DirectoryW GetSystemTimeAdjustment InitAtomTable GlobalFlags GetComputerNameExA GetBinaryTypeA GetAtomNameW ReadFile GetBinaryTypeW ExitThread DeactivateActCtx CreateDirectoryA ReleaseActCtx GetFileSizeEx GetStartupInfoA GetCurrentDirectoryW GetProcAddress VerLanguageNameA CreateNamedPipeA SetStdHandle SetComputerNameA BuildCommDCBW GetLocalTime LoadLibraryA Process32FirstW CreateSemaphoreW SetConsoleCtrlHandler SetCurrentDirectoryW WriteProfileSectionW VirtualLock WriteProfileStringA SetConsoleTitleW VirtualProtect CompareStringA GetFileAttributesExW GetCPInfoExA _lopen FindAtomW GetVolumeNameForVolumeMountPointW DeleteFileW GetCurrentProcessId ReadConsoleOutputCharacterW GetProfileSectionW LCMapStringW CopyFileExA AreFileApisANSI CommConfigDialogW GetModuleHandleA GetLastError WideCharToMultiByte GetCommandLineA HeapValidate IsBadReadPtr RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW GetACP GetOEMCP GetCPInfo IsValidCodePage TlsGetValue GetModuleHandleW TlsAlloc GetCurrentThreadId TlsFree SetLastError LeaveCriticalSection EnterCriticalSection GetFileType GetConsoleCP GetConsoleMode DeleteCriticalSection QueryPerformanceCounter GetSystemTimeAsFileTime Sleep ExitProcess GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetStdHandle HeapDestroy HeapCreate HeapFree VirtualFree HeapAlloc HeapSize HeapReAlloc VirtualAlloc DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW RtlUnwind MultiByteToWideChar LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP CreateFileA CloseHandle FlushFileBuffers

user32

GetMenuInfo GetListBoxInfo

Sharing

General

Malware Config

Signatures

File Explorer

963df9f6c9c48201ec3ac9d8314db41d

kernel32

user32

generic