986833a9a95de696a3962a4464a93267

General

Target
986833a9a95de696a3962a4464a93267
Size 389KB
Sample240213-efm6jsad52
SHA256 9a863a5a9598569c55368b41ded98a1a3bb0777cb6f37c47fc1c14e60d013690
MD5 986833a9a95de696a3962a4464a93267
SHA1 c1c9f93583ca53cc85871ad793c76882766b5a4e
SHA512 710539d39823aec4c66a2cfca29b75632b47daba3e77b32fc5d72f971c12b6c7ff993cc85747f8bb073c0d308e30abd91193b520bc21c5dd74832669049b448e
SSDEEP 12288:6wkW5XQiYDLLA9PEcC+5TQeRAMZdBzEG1py:5kSAiYTQTQe6AHAR
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
986833a9a95de696a3962a4464a93267

File Explorer

986833a9a95de696a3962a4464a93267

.exe 389KB

986833a9a95de696a3962a4464a93267

IMPHASH ed992e9862dcdd605c4491d0f95bb1d4
SHA256 9a863a5a9598569c55368b41ded98a1a3bb0777cb6f37c47fc1c14e60d013690
MD5 986833a9a95de696a3962a4464a93267
SHA1 c1c9f93583ca53cc85871ad793c76882766b5a4e
SHA512 710539d39823aec4c66a2cfca29b75632b47daba3e77b32fc5d72f971c12b6c7ff993cc85747f8bb073c0d308e30abd91193b520bc21c5dd74832669049b448e
SSDEEP 12288:6wkW5XQiYDLLA9PEcC+5TQeRAMZdBzEG1py:5kSAiYTQTQe6AHAR
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8400

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\jewopa\56\siho sowamolitilac huwayeri35\vefis.pdb

kernel32

FileTimeToDosDateTime EnumResourceNamesW SetPriorityClass WriteConsoleInputW SetFilePointer GetConsoleAliasesLengthW CopyFileExW InterlockedIncrement InterlockedDecrement WaitNamedPipeA CreateDirectoryW GlobalLock SetComputerNameW GetComputerNameW SetEvent FreeEnvironmentStringsA GetTickCount VirtualFree GetCommandLineA LoadLibraryW GetSystemWow64DirectoryW IsProcessorFeaturePresent CreateSemaphoreA SetConsoleCursorPosition ReadFile GetModuleFileNameW CompareStringW lstrlenW ReleaseActCtx GetFileSizeEx GetStartupInfoA OpenMutexW GetHandleInformation GetLastError GetProcAddress WriteProfileSectionA ReadFileEx CopyFileA GetPrivateProfileStringA LoadLibraryA OpenMutexA GetConsoleScreenBufferInfo LocalAlloc GetExitCodeThread SetCurrentDirectoryW PostQueuedCompletionStatus WriteProfileSectionW SetEnvironmentVariableA CreateIoCompletionPort HeapSetInformation GetCurrentDirectoryA FatalAppExitA GetCPInfoExA OpenSemaphoreW GetVersionExA TlsAlloc FindAtomW UnregisterWaitEx GetSystemTime LCMapStringW MoveFileA HeapValidate IsBadReadPtr RaiseException EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind GetACP GetOEMCP GetCPInfo IsValidCodePage TlsGetValue GetModuleHandleW TlsSetValue GetCurrentThreadId TlsFree SetLastError Sleep ExitProcess SetHandleCount GetStdHandle GetFileType DeleteCriticalSection QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapDestroy HeapCreate HeapFree WriteFile HeapAlloc HeapSize HeapReAlloc VirtualAlloc DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA LCMapStringA InitializeCriticalSectionAndSpinCount FlushFileBuffers GetConsoleCP GetConsoleMode CloseHandle SetStdHandle WriteConsoleA GetConsoleOutputCP CreateFileA GetModuleHandleA

Sharing

General

Malware Config

Signatures

File Explorer

986833a9a95de696a3962a4464a93267

kernel32

generic