3f1c152ada8da96c64fb64d115a36b6fb9917b184ca8eef47af3822d378e2e1b

General

Target
3f1c152ada8da96c64fb64d115a36b6fb9917b184ca8eef47af3822d378e2e1b
Size 242KB
Sample240215-v7ew9ada49
SHA256 3f1c152ada8da96c64fb64d115a36b6fb9917b184ca8eef47af3822d378e2e1b
MD5 92e703e3eb865f010994a8243fc92ac5
SHA1 16cbb30e73a484f79688bd45e730983e34471c6a
SHA512 6e308ec9ef49a82dc3a15c4793a6ba28f74590f1eb130e356217ecc855d2dd321e398ff643576a14ffdac016c277caea4ba73c38296f66f9f5c22cbc8ab6abd5
SSDEEP 3072:A2BJvw5pvw9qIMXoDMGCftSmVizjTE0i1m5QhLu1c3Gda5zq2hdl:A0JEv4qIKFtX4jUmcfq
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f1c152ada8da96c64fb64d115a36b6fb9917b184ca8eef47af3822d378e2e1b

File Explorer

3f1c152ada8da96c64fb64d115a36b6fb9917b184ca8eef47af3822d378e2e1b

.exe 242KB

3f1c152ada8da96c64fb64d115a36b6fb9917b184ca8eef47af3822d378e2e1b

IMPHASH 07026d0c530aec338dbd3ac0a08e637b
SHA256 3f1c152ada8da96c64fb64d115a36b6fb9917b184ca8eef47af3822d378e2e1b
MD5 92e703e3eb865f010994a8243fc92ac5
SHA1 16cbb30e73a484f79688bd45e730983e34471c6a
SHA512 6e308ec9ef49a82dc3a15c4793a6ba28f74590f1eb130e356217ecc855d2dd321e398ff643576a14ffdac016c277caea4ba73c38296f66f9f5c22cbc8ab6abd5
SSDEEP 3072:A2BJvw5pvw9qIMXoDMGCftSmVizjTE0i1m5QhLu1c3Gda5zq2hdl:A0JEv4qIKFtX4jUmcfq
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

10280

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\fax mojovahiripi64\morenuwe rekob.pdb

kernel32

GetTempFileNameW GetLocaleInfoA FindResourceW QueryDosDeviceA InterlockedCompareExchange AddConsoleAliasW GetComputerNameW GetTickCount GetConsoleAliasesLengthA GetConsoleTitleA GetUserDefaultLangID EnumResourceTypesA CreateDirectoryExW GlobalAlloc GetSystemDirectoryW GetVolumeInformationA GlobalFindAtomA AssignProcessToJobObject GetConsoleAliasExesLengthW VerifyVersionInfoA GetLogicalDriveStringsA SetLastError GetProcAddress VirtualAlloc HeapSize RemoveDirectoryA SetComputerNameA LoadLibraryA WriteConsoleA InterlockedExchangeAdd GetFileType GetNumberFormatW SetFileApisToANSI VirtualProtect GetFileAttributesExW DeleteFileW GetCurrentProcessId CreateWaitableTimerA CreateFileA GetModuleHandleW Sleep ExitProcess GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent MultiByteToWideChar GetLastError ReadFile EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle DeleteCriticalSection HeapFree SetFilePointer TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetSystemTimeAsFileTime GetModuleHandleA RaiseException GetCPInfo GetACP GetOEMCP IsValidCodePage SetStdHandle RtlUnwind HeapAlloc HeapReAlloc LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetConsoleCP GetConsoleMode FlushFileBuffers CloseHandle GetConsoleOutputCP WriteConsoleW

user32

IsWindowEnabled CharUpperBuffW

Sharing

General

Malware Config

Signatures

File Explorer

3f1c152ada8da96c64fb64d115a36b6fb9917b184ca8eef47af3822d378e2e1b

kernel32

user32

generic