a36427136d55ff4854748e7bad495deb

General

Target
a36427136d55ff4854748e7bad495deb
Size 565KB
Sample240225-k2kkfaha2x
SHA256 31387b874f954296d26d8b54c3f263251d7569b32990788a965caceebd375a26
MD5 a36427136d55ff4854748e7bad495deb
SHA1 1e8aa62e571ce6d8c27074d5a00c59b616c19449
SHA512 c5fd3a9c14efd123b72b5a3aea73646eef746fbcfafbef76720bab0e8f94b1565379ce6d38b563591c4908065c2e0252ff8606a5e388ab83bd2e4fe8fc2ab009
SSDEEP 12288:erBt7+7SAhBuOxStspny2kdJZK6vZUMX2uYTJ:ki7SAn3kthvZUR
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a36427136d55ff4854748e7bad495deb

File Explorer

a36427136d55ff4854748e7bad495deb

.exe 565KB

a36427136d55ff4854748e7bad495deb

IMPHASH c4bbba65aaf569dae0a87d41cd5cbbf2
SHA256 31387b874f954296d26d8b54c3f263251d7569b32990788a965caceebd375a26
MD5 a36427136d55ff4854748e7bad495deb
SHA1 1e8aa62e571ce6d8c27074d5a00c59b616c19449
SHA512 c5fd3a9c14efd123b72b5a3aea73646eef746fbcfafbef76720bab0e8f94b1565379ce6d38b563591c4908065c2e0252ff8606a5e388ab83bd2e4fe8fc2ab009
SSDEEP 12288:erBt7+7SAhBuOxStspny2kdJZK6vZUMX2uYTJ:ki7SAn3kthvZUR
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

6080

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\zoputuvodik_jedicinewibu miwamagexi\jayocuciganor.pdb

kernel32

GetComputerNameA EnumResourceNamesW UnregisterWait SetPriorityClass WriteConsoleInputW SetFilePointer GetConsoleAliasesLengthW InterlockedIncrement InterlockedDecrement WaitNamedPipeA CompareFileTime SetEnvironmentVariableW CreateDirectoryW GlobalLock SetEvent FreeEnvironmentStringsA GetTickCount GetCommandLineA GlobalAlloc AddRefActCtx LoadLibraryW GetSystemWow64DirectoryW IsProcessorFeaturePresent CreateSemaphoreA ReadFile GetModuleFileNameW CompareStringW lstrlenW LCMapStringA GetFileSizeEx GetStartupInfoA OpenMutexW GetHandleInformation GetCurrentDirectoryW SetLastError GetProcAddress VirtualAlloc WriteProfileSectionA ReadFileEx CopyFileA GetPrivateProfileStringA LoadLibraryA OpenMutexA GetConsoleScreenBufferInfo GetExitCodeThread SetCurrentDirectoryW PostQueuedCompletionStatus FindAtomA CreateIoCompletionPort HeapSetInformation GetConsoleCursorInfo FatalAppExitA GetCPInfoExA OpenSemaphoreW GetVersionExA TlsAlloc GetSystemTime CopyFileExA HeapValidate IsBadReadPtr RaiseException EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent SetHandleCount GetStdHandle GetFileType DeleteCriticalSection QueryPerformanceCounter GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime GetModuleHandleW Sleep ExitProcess GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetLastError GetEnvironmentStringsW TlsGetValue TlsSetValue TlsFree HeapDestroy HeapCreate HeapFree VirtualFree WriteFile HeapAlloc HeapSize HeapReAlloc GetACP GetOEMCP GetCPInfo IsValidCodePage RtlUnwind DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW MultiByteToWideChar InitializeCriticalSectionAndSpinCount LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers GetConsoleCP GetConsoleMode CloseHandle SetStdHandle WriteConsoleA GetConsoleOutputCP CreateFileA GetModuleHandleA

Sharing

General

Malware Config

Signatures

File Explorer

a36427136d55ff4854748e7bad495deb

kernel32

generic