a505cbaa9499a63b5c8768020843a736

General

Target
a505cbaa9499a63b5c8768020843a736
Size 595KB
Sample240226-a4x87sgf72
SHA256 54e67c2f40154e973f8be3657eb7b576309aad8bbf148ed55b22d2b57d8bcff2
MD5 a505cbaa9499a63b5c8768020843a736
SHA1 07fff00854aad45d4f26625b0677db09c6114a1b
SHA512 c07f5f9b1665c392faf1e6e3fada16beb9b51630558a1a770d35df6304b6cc9aa5f62bbb584f15840c51c1c2af3c023bf70f57ca204ab92da8ea8e2c115dd83c
SSDEEP 12288:ZTcDCRSvnXNuPggfWmvvsMPgoFr5bDgeJU6IyoNPSQuW+uRiIs3u:WDCwAoPMPpbDwkoN43uRse
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a505cbaa9499a63b5c8768020843a736

File Explorer

a505cbaa9499a63b5c8768020843a736

.exe 595KB

a505cbaa9499a63b5c8768020843a736

IMPHASH 235826e6e2580e249ef35ac90f832f1b
SHA256 54e67c2f40154e973f8be3657eb7b576309aad8bbf148ed55b22d2b57d8bcff2
MD5 a505cbaa9499a63b5c8768020843a736
SHA1 07fff00854aad45d4f26625b0677db09c6114a1b
SHA512 c07f5f9b1665c392faf1e6e3fada16beb9b51630558a1a770d35df6304b6cc9aa5f62bbb584f15840c51c1c2af3c023bf70f57ca204ab92da8ea8e2c115dd83c
SSDEEP 12288:ZTcDCRSvnXNuPggfWmvvsMPgoFr5bDgeJU6IyoNPSQuW+uRiIs3u:WDCwAoPMPpbDwkoN43uRse
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

6368

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\kizige.pdb

kernel32

UnregisterWait GetFileSize GetNativeSystemInfo SetFilePointer GetConsoleAliasesLengthW CopyFileExW SetLocalTime InterlockedIncrement VerSetConditionMask InterlockedDecrement ZombifyActCtx CompareFileTime GetSystemWindowsDirectoryW SetEnvironmentVariableW GlobalLock SetConsoleScreenBufferSize WriteConsoleInputA SetComputerNameW FreeEnvironmentStringsA VirtualFree SetProcessPriorityBoost FindResourceExA GetConsoleAliasExesLengthW GetComputerNameExA CreateSemaphoreA GetFileAttributesW GetBinaryTypeA ReadFile EnumResourceNamesW CompareStringW lstrlenW InterlockedExchange SetCurrentDirectoryA GetStartupInfoA GetCPInfoExW OpenMutexW GetCurrentDirectoryW GetProcAddress CreateNamedPipeA WriteProfileSectionA ReadFileEx SetStdHandle DisableThreadLibraryCalls GetPrivateProfileStringA LoadLibraryA GetConsoleScreenBufferInfo LocalAlloc PostQueuedCompletionStatus FindAtomA WriteProfileStringW FatalAppExitA GetVersionExA TlsAlloc DeleteFileW LCMapStringW AreFileApisANSI GetOverlappedResult GetComputerNameA GetLastError MoveFileA GetCommandLineA HeapValidate IsBadReadPtr RaiseException EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType DeleteCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW GetACP GetOEMCP GetCPInfo IsValidCodePage TlsGetValue GetModuleHandleW TlsSetValue GetCurrentThreadId TlsFree SetLastError QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep ExitProcess GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapDestroy HeapCreate HeapFree WriteFile HeapAlloc HeapSize HeapReAlloc VirtualAlloc RtlUnwind GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW LoadLibraryW MultiByteToWideChar GetStringTypeA GetStringTypeW GetModuleHandleA LCMapStringA GetLocaleInfoA FlushFileBuffers WriteConsoleA GetConsoleOutputCP CloseHandle CreateFileA

gdi32

GetBoundsRect

winhttp

WinHttpOpen

Sharing

General

Malware Config

Signatures

File Explorer

a505cbaa9499a63b5c8768020843a736

kernel32

gdi32

winhttp

generic