3bc4176c92815ae486276e06f1cf4ad4d8373c768008bde258b5cb2e56b47741

General

Target
3bc4176c92815ae486276e06f1cf4ad4d8373c768008bde258b5cb2e56b47741
Size 742KB
Sample240226-cagepshh88
SHA256 3bc4176c92815ae486276e06f1cf4ad4d8373c768008bde258b5cb2e56b47741
MD5 7b5ad634b26edb4974e81b6d5ed7b171
SHA1 472ecf99826eefbc6d35cbce36f1bacace8c2d89
SHA512 e022d66789d8966b550370bf65f8a84ea0ab5c1a53313af2aecd51d5cf4d0ac6a2c629d1ef62d052bf47d14f662688eec3dd57f4a1bbb1ac95313d021c5bbe29
SSDEEP 12288:lTUGjFE9Jcr74zfx1IWduTUm3c8xIm0J51JAkrZ3BAo6qEUmnbEQ+M5jA:9UGMzfXIWQT1xm5jAc3VkLbEQI
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3bc4176c92815ae486276e06f1cf4ad4d8373c768008bde258b5cb2e56b47741

File Explorer

3bc4176c92815ae486276e06f1cf4ad4d8373c768008bde258b5cb2e56b47741

.exe 742KB

3bc4176c92815ae486276e06f1cf4ad4d8373c768008bde258b5cb2e56b47741

IMPHASH 4d84adbb2e02d398fb59447e22f40d90
SHA256 3bc4176c92815ae486276e06f1cf4ad4d8373c768008bde258b5cb2e56b47741
MD5 7b5ad634b26edb4974e81b6d5ed7b171
SHA1 472ecf99826eefbc6d35cbce36f1bacace8c2d89
SHA512 e022d66789d8966b550370bf65f8a84ea0ab5c1a53313af2aecd51d5cf4d0ac6a2c629d1ef62d052bf47d14f662688eec3dd57f4a1bbb1ac95313d021c5bbe29
SSDEEP 12288:lTUGjFE9Jcr74zfx1IWduTUm3c8xIm0J51JAkrZ3BAo6qEUmnbEQ+M5jA:9UGMzfXIWQT1xm5jAc3VkLbEQI
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8876

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\yariji16\voda_geduwujarolowi4\jagirumizis\xaya.pdb

kernel32

GetConsoleAliasExesLengthA InterlockedIncrement ReadConsoleA GetConsoleAliasA InterlockedDecrement GetComputerNameW GetFileAttributesExA GetTickCount GenerateConsoleCtrlEvent GetConsoleTitleA CreateRemoteThread GetConsoleAliasExesW CreateDirectoryExW GlobalAlloc GlobalFindAtomA LoadLibraryW GetLocaleInfoW ReadConsoleInputA FindNextVolumeMountPointW GetLastError SetLastError GetProcAddress VirtualAlloc SetStdHandle SetComputerNameA GetTempFileNameA LoadLibraryA InterlockedExchangeAdd SetCalendarInfoW GetNumberFormatW RemoveDirectoryW QueryDosDeviceW DeviceIoControl GetModuleHandleA GetCurrentProcessId AddConsoleAliasA GetVolumeInformationW CloseHandle GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapFree SetHandleCount GetStdHandle GetFileType DeleteCriticalSection SetFilePointer EnterCriticalSection LeaveCriticalSection GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree QueryPerformanceCounter GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc RaiseException InitializeCriticalSectionAndSpinCount RtlUnwind WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers HeapSize CreateFileA

user32

CharUpperBuffA LoadKeyboardLayoutA RealGetWindowClassA

Sharing

General

Malware Config

Signatures

File Explorer

3bc4176c92815ae486276e06f1cf4ad4d8373c768008bde258b5cb2e56b47741

kernel32

user32

generic