5169ecaf2ed669073954f70df96ce6a218a65527e26b877b79f2c3d75475b3e8

General

Target
5169ecaf2ed669073954f70df96ce6a218a65527e26b877b79f2c3d75475b3e8
Size 253KB
Sample240226-cbbwlsaa47
SHA256 5169ecaf2ed669073954f70df96ce6a218a65527e26b877b79f2c3d75475b3e8
MD5 5f838f7e3ad9fde7d90827a4563e07dd
SHA1 e27ac04c88590e97259a7a46b004080b5da6a353
SHA512 a7eaf19228cceee04c6242cfeca81b6f06f7d4eed78bc4c3991bac86c629c814569a28728a233c48c8d6a87602487385ed79c317ff3c0a6aa8958b9590e7169a
SSDEEP 3072:jL82RVaMo8qJVYSqjBOmGrK8ZW94lK4vXMs5/DTz:fta3FVBa0mN8E94lrdDT
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5169ecaf2ed669073954f70df96ce6a218a65527e26b877b79f2c3d75475b3e8

File Explorer

5169ecaf2ed669073954f70df96ce6a218a65527e26b877b79f2c3d75475b3e8

.exe 253KB

5169ecaf2ed669073954f70df96ce6a218a65527e26b877b79f2c3d75475b3e8

IMPHASH 5dda066d95c830fd85c7c3534c3f1b8d
SHA256 5169ecaf2ed669073954f70df96ce6a218a65527e26b877b79f2c3d75475b3e8
MD5 5f838f7e3ad9fde7d90827a4563e07dd
SHA1 e27ac04c88590e97259a7a46b004080b5da6a353
SHA512 a7eaf19228cceee04c6242cfeca81b6f06f7d4eed78bc4c3991bac86c629c814569a28728a233c48c8d6a87602487385ed79c317ff3c0a6aa8958b9590e7169a
SSDEEP 3072:jL82RVaMo8qJVYSqjBOmGrK8ZW94lK4vXMs5/DTz:fta3FVBa0mN8E94lrdDT
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

9148

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\pebitedaf-muk-96-y.pdb

kernel32

HeapReAlloc GetDriveTypeW MapUserPhysicalPages InterlockedIncrement ReadConsoleA GetConsoleAliasA QueryDosDeviceA AddConsoleAliasW GetComputerNameW CreateDirectoryExA GetFileAttributesExA GetTickCount FindNextVolumeMountPointA ReadConsoleW GetConsoleAliasExesW GlobalAlloc GlobalFindAtomA LoadLibraryW GetLocaleInfoW GetConsoleAliasExesLengthW GetVolumePathNameA GetStdHandle GetLastError SetLastError GetProcAddress VirtualAlloc SetComputerNameA GetTempFileNameA LoadLibraryA GetNumberFormatW RemoveDirectoryW DeviceIoControl GetModuleHandleA QueryMemoryResourceNotification GetConsoleTitleW GetCurrentProcessId GetVolumeInformationW GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapFree SetHandleCount GetFileType DeleteCriticalSection SetFilePointer EnterCriticalSection LeaveCriticalSection GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException InitializeCriticalSectionAndSpinCount SetStdHandle RtlUnwind WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers HeapSize CreateFileA CloseHandle

user32

LoadKeyboardLayoutA CharUpperBuffA

Sharing

General

Malware Config

Signatures

File Explorer

5169ecaf2ed669073954f70df96ce6a218a65527e26b877b79f2c3d75475b3e8

kernel32

user32

generic