b2746a96337f79494d3bfd452c5fe1f069b45b9f008a680f868e5a79021c37c6

General

Target
b2746a96337f79494d3bfd452c5fe1f069b45b9f008a680f868e5a79021c37c6
Size 240KB
Sample240215-2kefjabb89
SHA256 b2746a96337f79494d3bfd452c5fe1f069b45b9f008a680f868e5a79021c37c6
MD5 32a338d19e0ae30d5f03936bbd64a997
SHA1 d74f6a5673fc0ae1e61042c7d6ba1d2907bc062f
SHA512 1203ed34a31679aecd07e4ca091ee484caf919a84a0c8a31fa81b5f51df54718162ec8bb81bb5f05288b60f426f8e13a6efc596f40bf1f44bd147fe334975ce5
SSDEEP 3072:K0WtGRxpvxGVgyAtgKro3rNebFjli/YcEokXEWrMvvxJQUTjJ6WLBGWU54yJp8bt:KRtOvcVgyyWkb5cEQZvIIJBTyr8c
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b2746a96337f79494d3bfd452c5fe1f069b45b9f008a680f868e5a79021c37c6

File Explorer

b2746a96337f79494d3bfd452c5fe1f069b45b9f008a680f868e5a79021c37c6

.exe 240KB

b2746a96337f79494d3bfd452c5fe1f069b45b9f008a680f868e5a79021c37c6

IMPHASH 91bb8825bca467b6a12695932de3b4cf
SHA256 b2746a96337f79494d3bfd452c5fe1f069b45b9f008a680f868e5a79021c37c6
MD5 32a338d19e0ae30d5f03936bbd64a997
SHA1 d74f6a5673fc0ae1e61042c7d6ba1d2907bc062f
SHA512 1203ed34a31679aecd07e4ca091ee484caf919a84a0c8a31fa81b5f51df54718162ec8bb81bb5f05288b60f426f8e13a6efc596f40bf1f44bd147fe334975ce5
SSDEEP 3072:K0WtGRxpvxGVgyAtgKro3rNebFjli/YcEokXEWrMvvxJQUTjJ6WLBGWU54yJp8bt:KRtOvcVgyyWkb5cEQZvIIJBTyr8c
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

10280

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\gejexujuhadowi-mugukegenukose\yakatah.pdb

kernel32

GetComputerNameA GetTempFileNameW FindResourceW QueryDosDeviceA GetUserDefaultLCID InterlockedCompareExchange AddConsoleAliasW GetFileAttributesExA GetTickCount GetConsoleAliasesLengthA GetConsoleTitleA EnumResourceTypesA CreateDirectoryExW GlobalAlloc GetSystemDirectoryW GlobalFindAtomA LoadLibraryW GetLocaleInfoW AssignProcessToJobObject GetSystemPowerStatus GetConsoleAliasExesLengthW WriteConsoleW GetLogicalDriveStringsA SetLastError GetProcAddress VirtualAlloc HeapSize RemoveDirectoryA SetComputerNameA LoadLibraryA InterlockedExchangeAdd GetFileType GetNumberFormatW SetFileApisToANSI VirtualProtect DeleteFileW GetCurrentProcessId CreateWaitableTimerA GetVolumeInformationW CreateFileA GetModuleHandleW Sleep ExitProcess GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent MultiByteToWideChar GetLastError ReadFile EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle DeleteCriticalSection HeapFree SetFilePointer TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetSystemTimeAsFileTime GetModuleHandleA RaiseException GetCPInfo GetACP GetOEMCP IsValidCodePage SetStdHandle RtlUnwind HeapAlloc HeapReAlloc GetLocaleInfoA LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetConsoleCP GetConsoleMode FlushFileBuffers CloseHandle WriteConsoleA GetConsoleOutputCP

user32

EnableWindow CharUpperBuffW

Sharing

General

Malware Config

Signatures

File Explorer

b2746a96337f79494d3bfd452c5fe1f069b45b9f008a680f868e5a79021c37c6

kernel32

user32

generic