93446b8aac27c90e5f9a9fc9dd8376cac7fe8c94977bfe9c50326b2aea247142

General

Target
93446b8aac27c90e5f9a9fc9dd8376cac7fe8c94977bfe9c50326b2aea247142
Size 231KB
Sample240214-fgfnjaaf86
SHA256 93446b8aac27c90e5f9a9fc9dd8376cac7fe8c94977bfe9c50326b2aea247142
MD5 7e9e73cd5e7ae3348e503347d4210cd9
SHA1 e5f4d2cddc027915f709e5c728fe268a790632b7
SHA512 2414ebe0cb8824268f3fb64f9f43b1cc4c6491a8f2362526730f8e0a082477145d827b0ffbe87f174a82cc742ab6f10f589c1c442d87955e7d6a52f192431ff4
SSDEEP 3072:HdKhh58jcFwwXtgQG/JzUldOZL9GwPc41N/9x4un5IzmXnvnHn5zlUz7:ohvjFRLG/nZxGwPcKN/gmIzOvxM
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
93446b8aac27c90e5f9a9fc9dd8376cac7fe8c94977bfe9c50326b2aea247142

File Explorer

93446b8aac27c90e5f9a9fc9dd8376cac7fe8c94977bfe9c50326b2aea247142

.exe 231KB

93446b8aac27c90e5f9a9fc9dd8376cac7fe8c94977bfe9c50326b2aea247142

IMPHASH 198ee001f344e625250fefb091c8c9f9
SHA256 93446b8aac27c90e5f9a9fc9dd8376cac7fe8c94977bfe9c50326b2aea247142
MD5 7e9e73cd5e7ae3348e503347d4210cd9
SHA1 e5f4d2cddc027915f709e5c728fe268a790632b7
SHA512 2414ebe0cb8824268f3fb64f9f43b1cc4c6491a8f2362526730f8e0a082477145d827b0ffbe87f174a82cc742ab6f10f589c1c442d87955e7d6a52f192431ff4
SSDEEP 3072:HdKhh58jcFwwXtgQG/JzUldOZL9GwPc41N/9x4un5IzmXnvnHn5zlUz7:ohvjFRLG/nZxGwPcKN/gmIzOvxM
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

10118

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\numo\nos\71_vuweyakux.pdb

kernel32

GetComputerNameA GetTempFileNameW FindResourceA GetLocaleInfoA InterlockedDecrement GetLogicalDriveStringsW SetComputerNameW GetTickCount GetUserDefaultLangID CreateDirectoryExW GlobalAlloc GetSystemDirectoryW GetVolumeInformationA GlobalFindAtomA LoadLibraryW AssignProcessToJobObject GetConsoleAliasExesLengthW VerifyVersionInfoA WriteConsoleW OpenMutexW SetLastError GetProcAddress VirtualAlloc HeapSize LoadLibraryA GetNumberFormatW RemoveDirectoryW SetFileApisToANSI QueryDosDeviceW EnumResourceTypesW GetConsoleTitleW VirtualProtect GetFileAttributesExW GetCurrentProcessId GetFileInformationByHandle CreateWaitableTimerA AddConsoleAliasA DeleteFileA CreateFileA GetModuleHandleW Sleep ExitProcess GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent MultiByteToWideChar GetLastError ReadFile EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType DeleteCriticalSection HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetSystemTimeAsFileTime GetModuleHandleA RaiseException GetCPInfo GetACP GetOEMCP IsValidCodePage SetFilePointer SetStdHandle RtlUnwind HeapAlloc HeapReAlloc LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetConsoleCP GetConsoleMode FlushFileBuffers CloseHandle WriteConsoleA GetConsoleOutputCP

user32

IsWindowEnabled CharUpperBuffW

Sharing

General

Malware Config

Signatures

File Explorer

93446b8aac27c90e5f9a9fc9dd8376cac7fe8c94977bfe9c50326b2aea247142

kernel32

user32

generic