5139502e2abc9385b66f10a5330f0e354d2a576e802d5bdfc7b8942eb496db20

General

Target
5139502e2abc9385b66f10a5330f0e354d2a576e802d5bdfc7b8942eb496db20
Size 341KB
Sample240226-cba93sae91
SHA256 5139502e2abc9385b66f10a5330f0e354d2a576e802d5bdfc7b8942eb496db20
MD5 43876c1104b9c9f49e59c4b45a3422a8
SHA1 f25b41eb819f390d2f43737b432ca8b770a80f1a
SHA512 2182ab8bc61f413e6b86c907c4c5bb0c38cf0030281588428a043951243e0621821c3b61a7ab2aa90900070005f1b4e56a63a4d5b98bc77f2be99cdc2ac97cb8
SSDEEP 6144:FtRVr+RvXRTIPqkuFqDe+gq66wmhbqSxPDLV2x1M7AHAptfIT:Fo0qkaqLgCwmlj5V2PM7AHQtQ
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5139502e2abc9385b66f10a5330f0e354d2a576e802d5bdfc7b8942eb496db20

File Explorer

5139502e2abc9385b66f10a5330f0e354d2a576e802d5bdfc7b8942eb496db20

.exe 341KB

5139502e2abc9385b66f10a5330f0e354d2a576e802d5bdfc7b8942eb496db20

IMPHASH 875098e451cd160871c9a66b3f79b97c
SHA256 5139502e2abc9385b66f10a5330f0e354d2a576e802d5bdfc7b8942eb496db20
MD5 43876c1104b9c9f49e59c4b45a3422a8
SHA1 f25b41eb819f390d2f43737b432ca8b770a80f1a
SHA512 2182ab8bc61f413e6b86c907c4c5bb0c38cf0030281588428a043951243e0621821c3b61a7ab2aa90900070005f1b4e56a63a4d5b98bc77f2be99cdc2ac97cb8
SSDEEP 6144:FtRVr+RvXRTIPqkuFqDe+gq66wmhbqSxPDLV2x1M7AHAptfIT:Fo0qkaqLgCwmlj5V2PM7AHQtQ
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

9068

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\hunazixalax\duwibayap_duralop.pdb

kernel32

GetComputerNameA GetTempFileNameW HeapReAlloc GetDriveTypeW GetConsoleAliasExesLengthA MapUserPhysicalPages InterlockedIncrement GetConsoleAliasA InterlockedCompareExchange SetComputerNameW AddConsoleAliasW CreateDirectoryExA GetTickCount ReadConsoleW GetConsoleAliasExesW GlobalAlloc GlobalFindAtomA GetLocaleInfoW GetVolumePathNameA GetStdHandle GetLastError SetLastError BackupRead GetProcAddress VirtualAlloc RemoveDirectoryA SetFileApisToOEM LoadLibraryA GetNumberFormatW QueryDosDeviceW FindNextChangeNotification GetModuleHandleA QueryMemoryResourceNotification GetConsoleTitleW GetFileAttributesExW GetCurrentProcessId GetVolumeInformationW CloseHandle GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapFree SetHandleCount GetFileType DeleteCriticalSection SetFilePointer EnterCriticalSection LeaveCriticalSection GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException InitializeCriticalSectionAndSpinCount SetStdHandle RtlUnwind WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers HeapSize CreateFileA

user32

CopyAcceleratorTableA CharUpperBuffA CharUpperBuffW

Sharing

General

Malware Config

Signatures

File Explorer

5139502e2abc9385b66f10a5330f0e354d2a576e802d5bdfc7b8942eb496db20

kernel32

user32

generic