70241b767ead356ff54eecae6a86202c[.]exe

General

Target
70241b767ead356ff54eecae6a86202c.exe
Size 226KB
Sample240221-js9mjadf32
SHA256 c6b066e441a2740f87cfa1e2a8da69a5dc7814411088d3f69c4d9fe9d2bf2ce4
MD5 70241b767ead356ff54eecae6a86202c
SHA1 836d12cbd4d8340922886c46a1325ee558e904b1
SHA512 5f0308e7eee7d94c43981fe31ae238918a6ee0068159da00e07679ea174309a9d2ece2de4efc016f48e1e7cf7e74b6b3e544fc0b984a919f5c331706d5d77c88
SSDEEP 3072:s/+i8T+A4XtcDsn3t0Ueinnn3wluL6GN+1qkUgeC5gPi2I+:YZXtcDk0Ue2nn3wm6swq3Ky
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
70241b767ead356ff54eecae6a86202c.exe

File Explorer

70241b767ead356ff54eecae6a86202c.exe

.exe 226KB

70241b767ead356ff54eecae6a86202c.exe

IMPHASH 8f1805f3ae545b0e731cb9cff13122c8
SHA256 c6b066e441a2740f87cfa1e2a8da69a5dc7814411088d3f69c4d9fe9d2bf2ce4
MD5 70241b767ead356ff54eecae6a86202c
SHA1 836d12cbd4d8340922886c46a1325ee558e904b1
SHA512 5f0308e7eee7d94c43981fe31ae238918a6ee0068159da00e07679ea174309a9d2ece2de4efc016f48e1e7cf7e74b6b3e544fc0b984a919f5c331706d5d77c88
SSDEEP 3072:s/+i8T+A4XtcDsn3t0Ueinnn3wluL6GN+1qkUgeC5gPi2I+:YZXtcDk0Ue2nn3wm6swq3Ky
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

9083

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\pawuk\bimafelexa\9\norecuyemi50\zohejusig.pdb

kernel32

GetComputerNameA GetFileSize GetLocaleInfoA GetConsoleAliasExesA GetDriveTypeW MapUserPhysicalPages InterlockedIncrement GetConsoleAliasA InterlockedDecrement AddConsoleAliasW CreateDirectoryExA GetModuleHandleW GetTickCount GetNumberFormatA ReadConsoleW GlobalAlloc GetVolumeInformationA GlobalFindAtomA LoadLibraryW AssignProcessToJobObject GetConsoleAliasExesLengthW SetLastError GetProcAddress VirtualAlloc HeapSize SetComputerNameA VerLanguageNameW LoadLibraryA RemoveDirectoryW QueryDosDeviceW FindNextChangeNotification GetConsoleTitleW VirtualProtect GetFileAttributesExW GetCurrentProcessId AreFileApisANSI Sleep ExitProcess GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree SetHandleCount GetStdHandle GetFileType DeleteCriticalSection SetFilePointer EnterCriticalSection LeaveCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId WriteFile GetModuleFileNameA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException HeapAlloc HeapReAlloc SetStdHandle RtlUnwind GetModuleHandleA WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers CreateFileA CloseHandle

user32

IsWindowEnabled CharUpperBuffW

Sharing