ceb677cfc7a99f7dd569fd9d324dc80193e8baec73afcef9324e1bdc2125b130

General

Target
ceb677cfc7a99f7dd569fd9d324dc80193e8baec73afcef9324e1bdc2125b130
Size 230KB
Sample240213-krhm4adh31
SHA256 ceb677cfc7a99f7dd569fd9d324dc80193e8baec73afcef9324e1bdc2125b130
MD5 de36e3595f602299015c17b281d220a5
SHA1 12b7726bcb3c27157c103bfec6213678ad62aed6
SHA512 c672cc8fd3df1c3013c90e5c31f9f63ab63d65f272ed10c194d15cc7a5de118aae118510b0114dd10122db76760201dbf1f79afb8945e2a1ab4cd37368b3ef08
SSDEEP 3072:1qKNhjpqxmemFwMnvo2DOiwtvpzXzFHF5WYD4HCanq17xOebXnh7y5rYRTS64:JNBfF3BDOXtvRXdWyiHq1dOezh/g6
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ceb677cfc7a99f7dd569fd9d324dc80193e8baec73afcef9324e1bdc2125b130

File Explorer

ceb677cfc7a99f7dd569fd9d324dc80193e8baec73afcef9324e1bdc2125b130

.exe 230KB

ceb677cfc7a99f7dd569fd9d324dc80193e8baec73afcef9324e1bdc2125b130

IMPHASH d492b09c073a9c2f77d881ff99fa361e
SHA256 ceb677cfc7a99f7dd569fd9d324dc80193e8baec73afcef9324e1bdc2125b130
MD5 de36e3595f602299015c17b281d220a5
SHA1 12b7726bcb3c27157c103bfec6213678ad62aed6
SHA512 c672cc8fd3df1c3013c90e5c31f9f63ab63d65f272ed10c194d15cc7a5de118aae118510b0114dd10122db76760201dbf1f79afb8945e2a1ab4cd37368b3ef08
SSDEEP 3072:1qKNhjpqxmemFwMnvo2DOiwtvpzXzFHF5WYD4HCanq17xOebXnh7y5rYRTS64:JNBfF3BDOXtvRXdWyiHq1dOezh/g6
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

10134

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\viyos\wuyazosukek tojepegawoji.pdb

kernel32

GetComputerNameA GetTempFileNameW FindResourceA GetLocaleInfoA InterlockedDecrement GetLogicalDriveStringsW AddConsoleAliasW GetTickCount GetUserDefaultLangID EnumResourceTypesA CreateDirectoryExW GlobalAlloc GetSystemDirectoryW GetVolumeInformationA GlobalFindAtomA LoadLibraryW AssignProcessToJobObject GetConsoleAliasExesLengthW WriteConsoleW VerifyVersionInfoW OpenMutexW SetLastError GetProcAddress VirtualAlloc HeapSize SetComputerNameA LoadLibraryA GetNumberFormatW RemoveDirectoryW SetFileApisToANSI QueryDosDeviceW CreateWaitableTimerW GetConsoleTitleW VirtualProtect GetFileAttributesExW GetCurrentProcessId GetFileInformationByHandle DeleteFileA CreateFileA GetConsoleOutputCP WriteConsoleA GetModuleHandleW Sleep ExitProcess GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent MultiByteToWideChar GetLastError ReadFile EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType DeleteCriticalSection HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetSystemTimeAsFileTime GetModuleHandleA RaiseException GetCPInfo GetACP GetOEMCP IsValidCodePage SetFilePointer SetStdHandle RtlUnwind HeapAlloc HeapReAlloc LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetConsoleCP GetConsoleMode FlushFileBuffers CloseHandle

user32

CharUpperBuffW IsWindowEnabled

winhttp

WinHttpOpen

Sharing

General

Malware Config

Signatures

File Explorer

ceb677cfc7a99f7dd569fd9d324dc80193e8baec73afcef9324e1bdc2125b130

kernel32

user32

winhttp

generic