18d4c4325fa3930646e04f03a812ccc0c3b8907297db98317bde5a77fed7ea08

General

Target
18d4c4325fa3930646e04f03a812ccc0c3b8907297db98317bde5a77fed7ea08
Size 234KB
Sample240219-aa77bafg8t
SHA256 18d4c4325fa3930646e04f03a812ccc0c3b8907297db98317bde5a77fed7ea08
MD5 91279277b9cc7d43752c76dcaea5fce6
SHA1 5411e516c578887602f29e56294e841b854b8b7e
SHA512 3f4fbd59734f694ce2079ac10769d34366ec3d376f166c406acda9dc71bfa203e1a958e96bd218c6b6c1f47c12600c4bfc137675b6b2d297eed2107c80064696
SSDEEP 3072:ntRDhbbbcLE9Ckqx8c4YgmDkkbmm4okHBqvs0R/b8JPbW:PB/cLE9CtycF1kZtoBb
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18d4c4325fa3930646e04f03a812ccc0c3b8907297db98317bde5a77fed7ea08

File Explorer

18d4c4325fa3930646e04f03a812ccc0c3b8907297db98317bde5a77fed7ea08

.exe 234KB

18d4c4325fa3930646e04f03a812ccc0c3b8907297db98317bde5a77fed7ea08

IMPHASH 4d315edbb8c420b0dead6e35ff95af50
SHA256 18d4c4325fa3930646e04f03a812ccc0c3b8907297db98317bde5a77fed7ea08
MD5 91279277b9cc7d43752c76dcaea5fce6
SHA1 5411e516c578887602f29e56294e841b854b8b7e
SHA512 3f4fbd59734f694ce2079ac10769d34366ec3d376f166c406acda9dc71bfa203e1a958e96bd218c6b6c1f47c12600c4bfc137675b6b2d297eed2107c80064696
SSDEEP 3072:ntRDhbbbcLE9Ckqx8c4YgmDkkbmm4okHBqvs0R/b8JPbW:PB/cLE9CtycF1kZtoBb
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8963

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\piharirotogu\hu.pdb

kernel32

InterlockedDecrement AddConsoleAliasW GetComputerNameW GetFileAttributesExA GetTickCount GetNumberFormatA GetConsoleTitleA ReadConsoleW CreateDirectoryExW GlobalAlloc GetVolumeInformationA GlobalFindAtomA LoadLibraryW AssignProcessToJobObject GetSystemPowerStatus GetConsoleAliasExesLengthW SetLastError GetConsoleAliasA VirtualAlloc HeapSize VerLanguageNameA RemoveDirectoryA SetComputerNameA LoadLibraryA GetFileType QueryDosDeviceW FindNextChangeNotification GetModuleHandleA CreateWaitableTimerW GetCurrentProcessId AreFileApisANSI CreateFileA GetDriveTypeW GetConsoleAliasExesA GetProcAddress GetLocaleInfoA GetCommandLineA GetStartupInfoA GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId GetLastError Sleep ExitProcess TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle DeleteCriticalSection HeapFree SetFilePointer WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetSystemTimeAsFileTime RaiseException GetCPInfo GetACP GetOEMCP IsValidCodePage HeapAlloc HeapReAlloc InitializeCriticalSectionAndSpinCount RtlUnwind ReadFile SetStdHandle GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW GetConsoleCP GetConsoleMode FlushFileBuffers WriteConsoleA GetConsoleOutputCP WriteConsoleW CloseHandle

user32

EnableWindow CharUpperBuffW

advapi32

CopySid DeleteAce DeregisterEventSource

Sharing

General

Malware Config

Signatures

File Explorer

18d4c4325fa3930646e04f03a812ccc0c3b8907297db98317bde5a77fed7ea08

kernel32

user32

advapi32

generic