26a9d28dcd68ffc0af4501d81f451a8a63c057299b700c1ba28d4e61938e2b3a

General

Target
26a9d28dcd68ffc0af4501d81f451a8a63c057299b700c1ba28d4e61938e2b3a
Size 791KB
Sample240219-mjkhtscf75
SHA256 26a9d28dcd68ffc0af4501d81f451a8a63c057299b700c1ba28d4e61938e2b3a
MD5 d758ff1c84f3b535ec7205ac4e75d40c
SHA1 afccc32aca3f7b994b2883b03f36ade261e7972c
SHA512 514f94443fb05adb7853021a5c9b3b204ad5a862bc8954c86f361f03dbb148007e4a3a5dd877dee6fc1f58c9035e31db25f99cf79af70ac9524547e20256e03c
SSDEEP 12288:aasgRLUx+qbWtHzA/mFvpaaFsU0ZDDNTb6BZX8iV/M:a6RtlVvYaFKZHNTb6nX8
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26a9d28dcd68ffc0af4501d81f451a8a63c057299b700c1ba28d4e61938e2b3a

File Explorer

26a9d28dcd68ffc0af4501d81f451a8a63c057299b700c1ba28d4e61938e2b3a

.exe 791KB

26a9d28dcd68ffc0af4501d81f451a8a63c057299b700c1ba28d4e61938e2b3a

IMPHASH dc5ec63e0bcde63b57add438fd34076f
SHA256 26a9d28dcd68ffc0af4501d81f451a8a63c057299b700c1ba28d4e61938e2b3a
MD5 d758ff1c84f3b535ec7205ac4e75d40c
SHA1 afccc32aca3f7b994b2883b03f36ade261e7972c
SHA512 514f94443fb05adb7853021a5c9b3b204ad5a862bc8954c86f361f03dbb148007e4a3a5dd877dee6fc1f58c9035e31db25f99cf79af70ac9524547e20256e03c
SSDEEP 12288:aasgRLUx+qbWtHzA/mFvpaaFsU0ZDDNTb6BZX8iV/M:a6RtlVvYaFKZHNTb6nX8
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8803

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\decasecovime\pacesevovoleha98_tutuv\po.pdb

kernel32

GetLocaleInfoA GetConsoleAliasExesA GetDriveTypeW MapUserPhysicalPages ReadConsoleA GetConsoleAliasA InterlockedDecrement AddConsoleAliasW GetComputerNameW GetFileAttributesExA GetTickCount GetNumberFormatA CreateDirectoryExW GlobalAlloc GetVolumeInformationA GlobalFindAtomA LoadLibraryW AssignProcessToJobObject GetSystemPowerStatus GetConsoleAliasExesLengthW SetLastError GetProcAddress VirtualAlloc HeapSize VerLanguageNameA RemoveDirectoryA SetComputerNameA LoadLibraryA GetFileType QueryDosDeviceW FindNextChangeNotification GetModuleHandleA GetConsoleTitleW GetCurrentProcessId AreFileApisANSI GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId GetLastError Sleep ExitProcess HeapFree SetHandleCount GetStdHandle DeleteCriticalSection SetFilePointer EnterCriticalSection LeaveCriticalSection WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException HeapAlloc HeapReAlloc InitializeCriticalSectionAndSpinCount RtlUnwind ReadFile SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers CreateFileA CloseHandle

user32

EnableWindow CharUpperBuffW

Sharing

General

Malware Config

Signatures

File Explorer

26a9d28dcd68ffc0af4501d81f451a8a63c057299b700c1ba28d4e61938e2b3a

kernel32

user32

generic