75797f5c19efd1cbecae73491e2fb1f1026ce435a01f402d67124778110b239f

General

Target
75797f5c19efd1cbecae73491e2fb1f1026ce435a01f402d67124778110b239f
Size 240KB
Sample240216-a8mchach7s
SHA256 75797f5c19efd1cbecae73491e2fb1f1026ce435a01f402d67124778110b239f
MD5 a05efaf63385624a9a6f4cb71e3034f2
SHA1 00921d3aa2c3cb750b0b2799001eaee1023c6e97
SHA512 c181aedf600a55843aaaacbefc585b9f7b0bad26e87bdc7b00c63d1c908f7d5994f89ef116847a201ec91a89fe869523ac5bcbe331203ccf85923e9ff44281e5
SSDEEP 3072:i0omm42dpvxmiFdS4wgtKO48l2Bq3PWdkkooNymbkgeJt3hxfdU5fl6Mud:FVmvvMiptwE3PWdkk1wg2tbfo
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
75797f5c19efd1cbecae73491e2fb1f1026ce435a01f402d67124778110b239f

File Explorer

75797f5c19efd1cbecae73491e2fb1f1026ce435a01f402d67124778110b239f

.exe 240KB

75797f5c19efd1cbecae73491e2fb1f1026ce435a01f402d67124778110b239f

IMPHASH 069aa2d2c2d766085c8a0624cbacd94c
SHA256 75797f5c19efd1cbecae73491e2fb1f1026ce435a01f402d67124778110b239f
MD5 a05efaf63385624a9a6f4cb71e3034f2
SHA1 00921d3aa2c3cb750b0b2799001eaee1023c6e97
SHA512 c181aedf600a55843aaaacbefc585b9f7b0bad26e87bdc7b00c63d1c908f7d5994f89ef116847a201ec91a89fe869523ac5bcbe331203ccf85923e9ff44281e5
SSDEEP 3072:i0omm42dpvxmiFdS4wgtKO48l2Bq3PWdkkooNymbkgeJt3hxfdU5fl6Mud:FVmvvMiptwE3PWdkk1wg2tbfo
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

10296

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\fobuzix-mutowev\58\ke.pdb

kernel32

GetComputerNameA GetTempFileNameW GlobalDeleteAtom FindResourceW QueryDosDeviceA GetUserDefaultLCID InterlockedCompareExchange AddConsoleAliasW GetFileAttributesExA GetTickCount GetConsoleAliasesLengthA GetConsoleTitleA EnumResourceTypesA CreateDirectoryExW GlobalAlloc GetSystemDirectoryW GlobalFindAtomA LoadLibraryW GetLocaleInfoW AssignProcessToJobObject GetSystemPowerStatus GetConsoleAliasExesLengthW WriteConsoleW GetLogicalDriveStringsA SetLastError GetProcAddress VirtualAlloc HeapSize RemoveDirectoryA SetComputerNameA LoadLibraryA InterlockedExchangeAdd GetFileType GetNumberFormatW SetFileApisToANSI VirtualProtect DeleteFileW GetCurrentProcessId CreateWaitableTimerA GetVolumeInformationW CreateFileA GetModuleHandleW Sleep ExitProcess GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent MultiByteToWideChar GetLastError ReadFile EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle DeleteCriticalSection HeapFree SetFilePointer TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetSystemTimeAsFileTime GetModuleHandleA RaiseException GetCPInfo GetACP GetOEMCP IsValidCodePage SetStdHandle RtlUnwind HeapAlloc HeapReAlloc GetLocaleInfoA LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetConsoleCP GetConsoleMode FlushFileBuffers CloseHandle WriteConsoleA GetConsoleOutputCP

user32

EnableWindow CharUpperBuffW

Sharing

General

Malware Config

Signatures

File Explorer

75797f5c19efd1cbecae73491e2fb1f1026ce435a01f402d67124778110b239f

kernel32

user32

generic