838b6357846044d7ed953bfcc2121e35f1b1899ac5094cbf71ef1b31f4ee7995

General

Target
838b6357846044d7ed953bfcc2121e35f1b1899ac5094cbf71ef1b31f4ee7995
Size 725KB
Sample240221-flg26abh2w
SHA256 838b6357846044d7ed953bfcc2121e35f1b1899ac5094cbf71ef1b31f4ee7995
MD5 a89f63f2fe172bd3f8549cddcbc737e0
SHA1 2884e9db30d638e6150164140c8fd2e606c32c82
SHA512 e85618f8bb061be24faa1bedb167fdb0cd9eb262191e6fe6b5cf41ececda967b70ac7c1acf3d952c67036deb35f4e3becde27fde8eae3f73aaec8880b7dd5f39
SSDEEP 12288:EIKbxVm4Pwz0fFs7zdxVrl+uGTw8bpch3jOnjxmeIq2ctkib:ES6wzDvVrY08bpu3KnAeITc6i
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
838b6357846044d7ed953bfcc2121e35f1b1899ac5094cbf71ef1b31f4ee7995

File Explorer

838b6357846044d7ed953bfcc2121e35f1b1899ac5094cbf71ef1b31f4ee7995

.exe 725KB

838b6357846044d7ed953bfcc2121e35f1b1899ac5094cbf71ef1b31f4ee7995

IMPHASH af922d14343eaa837537eb745ed612fe
SHA256 838b6357846044d7ed953bfcc2121e35f1b1899ac5094cbf71ef1b31f4ee7995
MD5 a89f63f2fe172bd3f8549cddcbc737e0
SHA1 2884e9db30d638e6150164140c8fd2e606c32c82
SHA512 e85618f8bb061be24faa1bedb167fdb0cd9eb262191e6fe6b5cf41ececda967b70ac7c1acf3d952c67036deb35f4e3becde27fde8eae3f73aaec8880b7dd5f39
SSDEEP 12288:EIKbxVm4Pwz0fFs7zdxVrl+uGTw8bpch3jOnjxmeIq2ctkib:ES6wzDvVrY08bpu3KnAeITc6i
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8803

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\vupevekize-lapohag77-fid.pdb

kernel32

GetComputerNameA GetLocaleInfoA GetConsoleAliasExesA GetDriveTypeW MapUserPhysicalPages ReadConsoleA GetConsoleAliasA InterlockedDecrement AddConsoleAliasW GetComputerNameW GetFileAttributesExA GetModuleHandleW GetTickCount GetNumberFormatA CreateDirectoryExW GlobalAlloc GetVolumeInformationA GlobalFindAtomA LoadLibraryW AssignProcessToJobObject GetSystemPowerStatus GetConsoleAliasExesLengthW SetLastError GetProcAddress VirtualAlloc HeapSize RemoveDirectoryA SetComputerNameA VerLanguageNameW LoadLibraryA GetFileType QueryDosDeviceW FindNextChangeNotification GetConsoleTitleW GetCurrentProcessId AreFileApisANSI GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId GetLastError Sleep ExitProcess HeapFree SetHandleCount GetStdHandle DeleteCriticalSection SetFilePointer EnterCriticalSection LeaveCriticalSection WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException HeapAlloc HeapReAlloc InitializeCriticalSectionAndSpinCount RtlUnwind ReadFile SetStdHandle GetModuleHandleA WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers CreateFileA CloseHandle

user32

IsWindowEnabled CharUpperBuffW

Sharing

General

Malware Config

Signatures

File Explorer

838b6357846044d7ed953bfcc2121e35f1b1899ac5094cbf71ef1b31f4ee7995

kernel32

user32

generic