a3a95a7be9cc017bfaddb6b377724cd763e038479e0f589b964243e545a4d1b9

General

Target
a3a95a7be9cc017bfaddb6b377724cd763e038479e0f589b964243e545a4d1b9
Size 232KB
Sample240219-ab2e6agb88
SHA256 a3a95a7be9cc017bfaddb6b377724cd763e038479e0f589b964243e545a4d1b9
MD5 663e449db4707fe7dc7ffda2a8dd7b5a
SHA1 13dd3499a10710f54dfb144b79c97db1d001d064
SHA512 93a9e44a94f8a9947bc5fd9798de1af25aad3b7279f0e5a657c1fdae6427fddea82a24613d9371c68e360e5b55e2c3bf467d5d45e0eac60f99aac56aacacc85c
SSDEEP 3072:7SNuaRKiDEQvyklwWgxzrlQBuayz5lbMCoDEi83RLX2dDKbW:26i4i2zJ4GbCDEDX
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a3a95a7be9cc017bfaddb6b377724cd763e038479e0f589b964243e545a4d1b9

File Explorer

a3a95a7be9cc017bfaddb6b377724cd763e038479e0f589b964243e545a4d1b9

.exe 232KB

a3a95a7be9cc017bfaddb6b377724cd763e038479e0f589b964243e545a4d1b9

IMPHASH 4c11a6f6448e670cc93b1d9fec85f456
SHA256 a3a95a7be9cc017bfaddb6b377724cd763e038479e0f589b964243e545a4d1b9
MD5 663e449db4707fe7dc7ffda2a8dd7b5a
SHA1 13dd3499a10710f54dfb144b79c97db1d001d064
SHA512 93a9e44a94f8a9947bc5fd9798de1af25aad3b7279f0e5a657c1fdae6427fddea82a24613d9371c68e360e5b55e2c3bf467d5d45e0eac60f99aac56aacacc85c
SSDEEP 3072:7SNuaRKiDEQvyklwWgxzrlQBuayz5lbMCoDEi83RLX2dDKbW:26i4i2zJ4GbCDEDX
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8835

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\kajuniwalodixe xavobo.pdb

kernel32

QueryDosDeviceA InterlockedCompareExchange AddConsoleAliasW GetComputerNameW GetFileAttributesExA GetTickCount GetNumberFormatA GetConsoleTitleA CreateDirectoryExW GlobalAlloc GetSystemDirectoryW GetVolumeInformationA GlobalFindAtomA LoadLibraryW AssignProcessToJobObject GetSystemPowerStatus GetConsoleAliasExesLengthW WriteConsoleW InterlockedDecrement SetLastError GetProcAddress VirtualAlloc HeapSize VerLanguageNameA RemoveDirectoryA SetComputerNameA LoadLibraryA GetFileType SetFileApisToANSI EnumResourceTypesW GetModuleHandleA CreateWaitableTimerW GetCurrentProcessId CreateFileA GetConsoleAliasA GetLocaleInfoA GetTempFileNameW GetCommandLineA GetStartupInfoA GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId GetLastError Sleep ExitProcess TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle DeleteCriticalSection HeapFree SetFilePointer WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetSystemTimeAsFileTime RaiseException GetCPInfo GetACP GetOEMCP IsValidCodePage HeapAlloc HeapReAlloc InitializeCriticalSectionAndSpinCount RtlUnwind ReadFile SetStdHandle GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW GetConsoleCP GetConsoleMode FlushFileBuffers WriteConsoleA GetConsoleOutputCP CloseHandle

user32

EnableWindow CharUpperBuffW

advapi32

DeregisterEventSource DeleteAce AreAllAccessesGranted

Sharing

General

Malware Config

Signatures

File Explorer

a3a95a7be9cc017bfaddb6b377724cd763e038479e0f589b964243e545a4d1b9

kernel32

user32

advapi32

generic