99b6edd21a762c8dd15b83688516469e

General

Target
99b6edd21a762c8dd15b83688516469e
Size 674KB
Sample240213-vx364adg2v
SHA256 b5835bcf48839eb68a402761c8474123758bd43d08b81738bbf84620df49e307
MD5 99b6edd21a762c8dd15b83688516469e
SHA1 0db1c3b2a66c0d34889b673c8df266a31d654d7c
SHA512 f0b142dda0d9e2052c06e296565612565989f469a9d433cc4bf09a7bb7fcc4c3450db50625154de0aa77f8b6de1396bae67af11fc9b1134a41964c8788605a6f
SSDEEP 12288:YXiyk60+CTsa+mK6AxeyW0En3u/+y8v1NzQpF+lI/acaxXS5VRTx:Ryk60fsF6aPBE3u/ds1OOIV6XS5zd
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
99b6edd21a762c8dd15b83688516469e

File Explorer

99b6edd21a762c8dd15b83688516469e

.exe 674KB

99b6edd21a762c8dd15b83688516469e

IMPHASH ae8d52d466f0b65d50fa6d5967396375
SHA256 b5835bcf48839eb68a402761c8474123758bd43d08b81738bbf84620df49e307
MD5 99b6edd21a762c8dd15b83688516469e
SHA1 0db1c3b2a66c0d34889b673c8df266a31d654d7c
SHA512 f0b142dda0d9e2052c06e296565612565989f469a9d433cc4bf09a7bb7fcc4c3450db50625154de0aa77f8b6de1396bae67af11fc9b1134a41964c8788605a6f
SSDEEP 12288:YXiyk60+CTsa+mK6AxeyW0En3u/+y8v1NzQpF+lI/acaxXS5VRTx:Ryk60fsF6aPBE3u/ds1OOIV6XS5zd
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

5232

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\natacijici_hacocub.pdb

kernel32

GetComputerNameA UnregisterWait GetNativeSystemInfo SetFilePointer lstrlenA GetConsoleAliasesLengthW GetConsoleAliasExesA GetConsoleAliasExesLengthA MapUserPhysicalPages InterlockedIncrement VerSetConditionMask GetCommState InterlockedDecrement ZombifyActCtx CompareFileTime GetSystemWindowsDirectoryW SetEnvironmentVariableW GlobalLock SetConsoleScreenBufferSize WriteConsoleInputA FreeEnvironmentStringsA LocalFlags VirtualFree GenerateConsoleCtrlEvent WriteFile SetCommState SetProcessPriorityBoost FindResourceExA LoadLibraryW GetCalendarInfoW InitAtomTable GetComputerNameExA GetConsoleAliasW GetFileAttributesW GetBinaryTypeW GetOverlappedResult InterlockedExchange GetFileSizeEx SetCurrentDirectoryA GetStartupInfoA GetCPInfoExW GetCurrentDirectoryW ReadConsoleOutputCharacterA GetProcAddress SetFirmwareEnvironmentVariableW CreateNamedPipeA WriteProfileSectionA ReadFileEx SetStdHandle SetComputerNameA DisableThreadLibraryCalls GetPrivateProfileStringA GetLocalTime LoadLibraryA OpenMutexA CreateSemaphoreW LocalAlloc FindAtomA SetSystemTime SetConsoleTitleW EnumResourceNamesA WriteProfileStringW BuildCommDCBA CompareStringA GetConsoleCursorInfo FatalAppExitA GetCPInfoExA _lopen GetVersionExA TlsAlloc FindAtomW GetProfileSectionW LCMapStringW CopyFileExA AreFileApisANSI CommConfigDialogW DeleteFileA GetModuleHandleA GetLastError MoveFileA GetCommandLineA HeapValidate IsBadReadPtr RaiseException DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetModuleFileNameW SetUnhandledExceptionFilter QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime GetModuleHandleW Sleep ExitProcess GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType TlsGetValue TlsSetValue TlsFree SetLastError HeapDestroy HeapCreate HeapFree HeapAlloc TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent HeapSize HeapReAlloc VirtualAlloc GetACP GetOEMCP GetCPInfo IsValidCodePage RtlUnwind InitializeCriticalSectionAndSpinCount DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW MultiByteToWideChar LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP GetConsoleMode WriteConsoleA GetConsoleOutputCP CreateFileA CloseHandle FlushFileBuffers

user32

GetMessageTime GetMenuInfo

Sharing

General

Malware Config

Signatures

File Explorer

99b6edd21a762c8dd15b83688516469e

kernel32

user32

generic