a83df950cfdaaadaa011bda73e2a28e0

General

Target
a83df950cfdaaadaa011bda73e2a28e0
Size 493KB
Sample240227-fbkejagd79
SHA256 85c01034f8f001668bd4369676f335560b08ceddf60257373071c9a7dff8e8a1
MD5 a83df950cfdaaadaa011bda73e2a28e0
SHA1 33055f456de39871659726ae0a3f22858b2def69
SHA512 fc8858e7acae6ee861cbecda694df87636b3203f14f4b578b5618c088a63e54672cf6712ad54e786be9f84b3313b8f51ea5cbd9dd737d15776eaab6bd2723138
SSDEEP 12288:rJf1RlJAqLrkogo8o0goE2PbXZKpr2MBe9rcWWARwoO:rJtRlNwLoz7zUXoZ/9WW2
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a83df950cfdaaadaa011bda73e2a28e0

File Explorer

a83df950cfdaaadaa011bda73e2a28e0

.exe 493KB

a83df950cfdaaadaa011bda73e2a28e0

IMPHASH 21290e74dfe27e6d84750e7140040846
SHA256 85c01034f8f001668bd4369676f335560b08ceddf60257373071c9a7dff8e8a1
MD5 a83df950cfdaaadaa011bda73e2a28e0
SHA1 33055f456de39871659726ae0a3f22858b2def69
SHA512 fc8858e7acae6ee861cbecda694df87636b3203f14f4b578b5618c088a63e54672cf6712ad54e786be9f84b3313b8f51ea5cbd9dd737d15776eaab6bd2723138
SSDEEP 12288:rJf1RlJAqLrkogo8o0goE2PbXZKpr2MBe9rcWWARwoO:rJtRlNwLoz7zUXoZ/9WW2
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

346215

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\piteril\fidimofupigi wahuk\mikewi.pdb

kernel32

EnterCriticalSection GetConsoleAliasesLengthA InterlockedExchangeAdd EraseTape GetSystemDefaultLCID CreateActCtxW GetCPInfoExW WriteConsoleInputW ReadConsoleInputW InterlockedPopEntrySList SetConsoleDisplayMode WriteConsoleA GetConsoleCP VerifyVersionInfoW CreateFileW WritePrivateProfileSectionW GetPrivateProfileSectionA EnumDateFormatsExA CancelTimerQueueTimer LoadLibraryA FlushInstructionCache SetConsoleCP FindFirstVolumeA ReadFile BuildCommDCBW VerLanguageNameW SetFileApisToANSI WriteProcessMemory LeaveCriticalSection SetEvent GetExitCodeThread EndUpdateResourceA GetCPInfoExA GetLastError UpdateResourceA SetConsoleTitleW FindClose LoadLibraryExA CopyFileW ReadConsoleA ZombifyActCtx AddRefActCtx HeapUnlock DnsHostnameToComputerNameA ReadConsoleOutputW GetProcessHeaps GetSystemWindowsDirectoryA GetUserDefaultLCID BuildCommDCBAndTimeoutsA HeapAlloc UnmapViewOfFile GetAtomNameW HeapSize GetGeoInfoA GetCurrentProcess VirtualProtect GetProcAddress GetModuleHandleA CreateThread GetVersionExW GetProcessAffinityMask WaitForSingleObject SetConsoleCursorInfo VerifyVersionInfoA WriteConsoleOutputCharacterA GetFileAttributesExA GetComputerNameA CommConfigDialogW GetConsoleAliasA GetSystemTimeAsFileTime GetDiskFreeSpaceW InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection RtlUnwind RaiseException HeapFree TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapReAlloc GetCommandLineA GetStartupInfoA LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetCPInfo GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc SetHandleCount GetStdHandle GetFileType SetFilePointer ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA GetStringTypeW InitializeCriticalSectionAndSpinCount SetStdHandle GetConsoleMode FlushFileBuffers GetConsoleOutputCP WriteConsoleW CloseHandle CreateFileA

user32

GetAltTabInfoA RealChildWindowFromPoint

Sharing

General

Malware Config

Signatures

File Explorer

a83df950cfdaaadaa011bda73e2a28e0

kernel32

user32

generic