7b3e6ffd3eca6fddbab6290b091938fcd074dad1a6092bc1dee8e62d6d430233

General

Target
7b3e6ffd3eca6fddbab6290b091938fcd074dad1a6092bc1dee8e62d6d430233
Size 229KB
Sample240212-fl7b2scc4w
SHA256 7b3e6ffd3eca6fddbab6290b091938fcd074dad1a6092bc1dee8e62d6d430233
MD5 160f8e37863a34c2bf09c7b5036d751f
SHA1 b8c13dcfbbf1ca1b630fa2269c1fca99e250447d
SHA512 0c67a67649f64587bc407289cb52efc8b154d8e8a7845729cb18273d52e78eca5fb29c950c156ff3b2647ef60fdd881c66f5b97e2ee73d8fe6705d3431d451b1
SSDEEP 3072:pVQdJf/IEhsGtFkSd9YG9mKrO+DaTsLXoQw1dXTzXsWJ5zAMXfj:gbtnduOmKrOuXoQUDrdAMXL
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7b3e6ffd3eca6fddbab6290b091938fcd074dad1a6092bc1dee8e62d6d430233

File Explorer

7b3e6ffd3eca6fddbab6290b091938fcd074dad1a6092bc1dee8e62d6d430233

.exe 229KB

7b3e6ffd3eca6fddbab6290b091938fcd074dad1a6092bc1dee8e62d6d430233

IMPHASH 0bfb366fe62f0564e4262cbe4e71dd24
SHA256 7b3e6ffd3eca6fddbab6290b091938fcd074dad1a6092bc1dee8e62d6d430233
MD5 160f8e37863a34c2bf09c7b5036d751f
SHA1 b8c13dcfbbf1ca1b630fa2269c1fca99e250447d
SHA512 0c67a67649f64587bc407289cb52efc8b154d8e8a7845729cb18273d52e78eca5fb29c950c156ff3b2647ef60fdd881c66f5b97e2ee73d8fe6705d3431d451b1
SSDEEP 3072:pVQdJf/IEhsGtFkSd9YG9mKrO+DaTsLXoQw1dXTzXsWJ5zAMXfj:gbtnduOmKrOuXoQUDrdAMXL
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

9990

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\seso_renide\sibam40\podovegu-zasavel2_refeloyegigi kuxahe.pdb

kernel32

FindResourceA GetLocaleInfoA GetConsoleAliasExesLengthA InterlockedDecrement GetLogicalDriveStringsW AddConsoleAliasW GetTickCount GetNumberFormatA GetUserDefaultLangID EnumResourceTypesA CreateDirectoryExW GlobalAlloc GetSystemDirectoryW GetVolumeInformationA GlobalFindAtomA LoadLibraryW AssignProcessToJobObject WriteConsoleW VerifyVersionInfoW GetTempFileNameW GetProcAddress VirtualAlloc HeapSize RemoveDirectoryA SetComputerNameA LoadLibraryA SetFileApisToANSI QueryDosDeviceW CreateWaitableTimerW GetConsoleTitleW VirtualProtect GetFileAttributesExW GetCurrentProcessId GetFileInformationByHandle DeleteFileA SetLastError GetComputerNameA CloseHandle CreateFileA GetModuleHandleW Sleep ExitProcess GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent MultiByteToWideChar GetLastError ReadFile EnterCriticalSection LeaveCriticalSection HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId WriteFile GetStdHandle GetModuleFileNameA DeleteCriticalSection InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType HeapCreate VirtualFree QueryPerformanceCounter GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage GetModuleHandleA RaiseException SetStdHandle RtlUnwind HeapAlloc HeapReAlloc WriteConsoleA GetConsoleOutputCP LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers

user32

CharUpperBuffW IsWindowEnabled

advapi32

ReadEventLogA

winhttp

WinHttpCheckPlatform

Sharing

General

Malware Config

Signatures

File Explorer

7b3e6ffd3eca6fddbab6290b091938fcd074dad1a6092bc1dee8e62d6d430233

kernel32

user32

advapi32

winhttp

generic