68abca4995919db0fe3a4e9158062759b2267ebcd8e3036f7eb8e71ed6202c85

General

Target
68abca4995919db0fe3a4e9158062759b2267ebcd8e3036f7eb8e71ed6202c85
Size 245KB
Sample240226-ccvecaaa83
SHA256 68abca4995919db0fe3a4e9158062759b2267ebcd8e3036f7eb8e71ed6202c85
MD5 e654823683cb9be41044f5a800be69fd
SHA1 d43214c03a47f3b0c77a82eca775d702eaa025e8
SHA512 d20b18482b8f85bfa887495275712527939b388f912eac2388b2c446d4370a87118c01482898316b943667b2525b9b089d44e8e693cc6c5a6d9355ab2d9e6bcc
SSDEEP 3072:Xw9eEIeQ1hQglTvIwiO6mdIvr970TwlX/q6W8rSbN/y55UWpyr7:gS2uvIwiO6mI96wlfWFbBDWpe
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
68abca4995919db0fe3a4e9158062759b2267ebcd8e3036f7eb8e71ed6202c85

File Explorer

68abca4995919db0fe3a4e9158062759b2267ebcd8e3036f7eb8e71ed6202c85

.exe 245KB

68abca4995919db0fe3a4e9158062759b2267ebcd8e3036f7eb8e71ed6202c85

IMPHASH 8a2d974d23031a4e8b7d19d4cbed4814
SHA256 68abca4995919db0fe3a4e9158062759b2267ebcd8e3036f7eb8e71ed6202c85
MD5 e654823683cb9be41044f5a800be69fd
SHA1 d43214c03a47f3b0c77a82eca775d702eaa025e8
SHA512 d20b18482b8f85bfa887495275712527939b388f912eac2388b2c446d4370a87118c01482898316b943667b2525b9b089d44e8e693cc6c5a6d9355ab2d9e6bcc
SSDEEP 3072:Xw9eEIeQ1hQglTvIwiO6mdIvr970TwlX/q6W8rSbN/y55UWpyr7:gS2uvIwiO6mI96wlfWFbBDWpe
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8707

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\watelil\kah\wuzupaleralez\lesazawimek.pdb

kernel32

GetComputerNameA HeapReAlloc GetDriveTypeW GetConsoleAliasExesLengthA MapUserPhysicalPages InterlockedIncrement GetConsoleAliasA InterlockedCompareExchange SetComputerNameW AddConsoleAliasW GetTickCount GetConsoleTitleA ReadConsoleW GetConsoleAliasExesW CreateDirectoryExW GlobalAlloc GlobalFindAtomA GetLocaleInfoW GetVolumePathNameA GetStdHandle GetLastError SetLastError BackupRead GetProcAddress VirtualAlloc RemoveDirectoryA SetFileApisToOEM LoadLibraryA FindFirstVolumeMountPointW GetNumberFormatW QueryDosDeviceW FindNextChangeNotification GetModuleHandleA QueryMemoryResourceNotification GetFileAttributesExW GetCurrentProcessId GetVolumeInformationW CloseHandle CreateFileA HeapSize FlushFileBuffers GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree SetHandleCount GetFileType DeleteCriticalSection SetFilePointer EnterCriticalSection LeaveCriticalSection GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage RaiseException HeapAlloc InitializeCriticalSectionAndSpinCount SetStdHandle RtlUnwind WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA

user32

CharUpperBuffA CharUpperBuffW CopyAcceleratorTableA

shell32

FindExecutableA

winhttp

WinHttpReadData

Sharing

General

Malware Config

Signatures

File Explorer

68abca4995919db0fe3a4e9158062759b2267ebcd8e3036f7eb8e71ed6202c85

kernel32

user32

shell32

winhttp

generic