5212ecaf2c3880d92f371356d84105be[.]exe

General

Target
5212ecaf2c3880d92f371356d84105be.exe
Size 254KB
Sample240224-3ljmbagg55
SHA256 cc4cb393dfc2c8fef2d76f297554a93cbec91244fe7ad5dc3ab533018d52fc84
MD5 5212ecaf2c3880d92f371356d84105be
SHA1 d17cc3b0083fef207a84eefbb927ac9a79ef01ae
SHA512 a1987d88d57e2a835f81b771da0bd8f8d26800d023d088558a688979bd876a8f142fdfe2b2462907be6401152fc3ec7dd87bae0749e118c9ca82080963253a09
SSDEEP 3072:Gl6mR5pZ1bjBUEzlFJYPBWk8XMF5uaaaETz:+XpZRj2yY5p4RaavT
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5212ecaf2c3880d92f371356d84105be.exe

File Explorer

5212ecaf2c3880d92f371356d84105be.exe

.exe 254KB

5212ecaf2c3880d92f371356d84105be.exe

IMPHASH f2dc52b6d6a4a9d8dd61cc87c78f5488
SHA256 cc4cb393dfc2c8fef2d76f297554a93cbec91244fe7ad5dc3ab533018d52fc84
MD5 5212ecaf2c3880d92f371356d84105be
SHA1 d17cc3b0083fef207a84eefbb927ac9a79ef01ae
SHA512 a1987d88d57e2a835f81b771da0bd8f8d26800d023d088558a688979bd876a8f142fdfe2b2462907be6401152fc3ec7dd87bae0749e118c9ca82080963253a09
SSDEEP 3072:Gl6mR5pZ1bjBUEzlFJYPBWk8XMF5uaaaETz:+XpZRj2yY5p4RaavT
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

9164

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\fiyiw\zebixatukub\wiyu\vuce.pdb

kernel32

HeapReAlloc GetDriveTypeW InterlockedIncrement ReadConsoleA GetConsoleAliasA QueryDosDeviceA GetComputerNameW CreateDirectoryExA GetFileAttributesExA GetTickCount FindNextVolumeMountPointA GetConsoleTitleA ReadConsoleW GetConsoleAliasExesW GlobalAlloc GlobalFindAtomA LoadLibraryW GetLocaleInfoW GetConsoleAliasExesLengthW GetVolumePathNameA GetLastError SetLastError GetProcAddress VirtualAlloc RemoveDirectoryA SetStdHandle FreeUserPhysicalPages SetComputerNameA GetTempFileNameA LoadLibraryA InterlockedExchangeAdd GetNumberFormatW DeviceIoControl GetModuleHandleA QueryMemoryResourceNotification GetCurrentProcessId AddConsoleAliasA GetVolumeInformationW CloseHandle GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapFree SetHandleCount GetStdHandle GetFileType DeleteCriticalSection SetFilePointer EnterCriticalSection LeaveCriticalSection GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException InitializeCriticalSectionAndSpinCount RtlUnwind WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers HeapSize CreateFileA

user32

CharUpperBuffA LoadKeyboardLayoutA RealGetWindowClassA

Sharing