a81345ef81da367a72c666a962c4bd0a

General

Target
a81345ef81da367a72c666a962c4bd0a
Size 279KB
Sample240227-dsd8qsfa29
SHA256 bcd611c91a047fe69628aaf5535cf749a5e0cf2e728f443a23b816f2dc19dc92
MD5 a81345ef81da367a72c666a962c4bd0a
SHA1 37097d48f00a444d26aaed923fea798431d7f965
SHA512 ca58cdce777052950d38f0f1ac3f872e9d0e362c264aa0f9cb05344fb25fab687c77cd02adae685a219c39cb4c321ba407c6f8a1b153de4344f1c0b7f4f5b6b5
SSDEEP 6144:ciXBJgi/D0zr5/CZP9HQj/+Qu+MFHxcD676zV:pGi/DqrgZFHgRu+MFHiaSV
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a81345ef81da367a72c666a962c4bd0a

File Explorer

a81345ef81da367a72c666a962c4bd0a

.exe 279KB

a81345ef81da367a72c666a962c4bd0a

IMPHASH a30b70feaaf646aa38caacdb4af5c88b
SHA256 bcd611c91a047fe69628aaf5535cf749a5e0cf2e728f443a23b816f2dc19dc92
MD5 a81345ef81da367a72c666a962c4bd0a
SHA1 37097d48f00a444d26aaed923fea798431d7f965
SHA512 ca58cdce777052950d38f0f1ac3f872e9d0e362c264aa0f9cb05344fb25fab687c77cd02adae685a219c39cb4c321ba407c6f8a1b153de4344f1c0b7f4f5b6b5
SSDEEP 6144:ciXBJgi/D0zr5/CZP9HQj/+Qu+MFHxcD676zV:pGi/DqrgZFHgRu+MFHiaSV
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8544

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\cutotafir\julixadumeh\fovifux.pdb

kernel32

SetFilePointer lstrlenA GetDriveTypeW InterlockedIncrement GetQueuedCompletionStatus InterlockedDecrement CompareFileTime GetSystemWindowsDirectoryW GetNamedPipeHandleStateA WaitForSingleObject OpenSemaphoreA FreeEnvironmentStringsA GetTickCount VirtualFree GetConsoleAliasesLengthA GetPrivateProfileStringW WaitNamedPipeW WriteFile SetCommState GetCommandLineA TlsSetValue GetPriorityClass GlobalAlloc GetConsoleMode TerminateThread CopyFileW SetConsoleMode IsProcessorFeaturePresent GetBinaryTypeA GetOverlappedResult CompareStringW GetStartupInfoW SetThreadContext VerifyVersionInfoW CreateDirectoryA ReleaseActCtx GetFileSizeEx SetCurrentDirectoryA GetCPInfoExW OpenMutexW GetLastError IsDBCSLeadByteEx ReadConsoleOutputCharacterA GetProcAddress WriteProfileSectionA ResetEvent OpenWaitableTimerA LoadLibraryA CreateSemaphoreW WriteProfileSectionW HeapWalk FindAtomA Process32NextW WriteProfileStringA GetModuleHandleA FindFirstChangeNotificationA EnumResourceNamesA GetConsoleCursorInfo FatalAppExitA GetCurrentThreadId GetVersionExA GetSystemTime LCMapStringW CopyFileExA DeleteFileA GlobalUnlock UnregisterWait WideCharToMultiByte GetStartupInfoA HeapValidate IsBadReadPtr RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW GetACP GetOEMCP GetCPInfo IsValidCodePage TlsGetValue GetModuleHandleW TlsAlloc TlsFree SetLastError Sleep ExitProcess DeleteCriticalSection EnterCriticalSection LeaveCriticalSection QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType HeapDestroy HeapCreate HeapFree HeapAlloc HeapSize HeapReAlloc VirtualAlloc DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW LoadLibraryW RtlUnwind MultiByteToWideChar LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA InitializeCriticalSectionAndSpinCount GetConsoleCP SetStdHandle WriteConsoleA GetConsoleOutputCP CreateFileA CloseHandle FlushFileBuffers

gdi32

GetCharWidthW

Sharing

General

Malware Config

Signatures

File Explorer

a81345ef81da367a72c666a962c4bd0a

kernel32

gdi32

generic