a8aba262bcadfe4fb63930d4d9533fc2

General

Target
a8aba262bcadfe4fb63930d4d9533fc2
Size 1.2MB
Sample240227-j54xtacf4v
SHA256 b48cf1854b8ff73a0bb9d4e54b5811ea3ac7a5d3e0c6c57f8825a4de396f36cc
MD5 a8aba262bcadfe4fb63930d4d9533fc2
SHA1 2c5e2d715f6c19de2a4ec38da5c6c98536171c02
SHA512 f5dfaf99040f9b9a89890e90d0576a1d842745478ca902af4f8953330940f84314d0bff58d6e218a40841a73ee1ed0a01d2aba228085c7193ef2920cb8de0389
SSDEEP 24576:XIojPlC7PV2kKjW7zeYPmf1Bpw0BL3rd+2wl4W/Vpnr8dvWoNU:XTY7tDeNBpZBL36l4W/f81
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a8aba262bcadfe4fb63930d4d9533fc2

File Explorer

a8aba262bcadfe4fb63930d4d9533fc2

.exe 1.2MB

a8aba262bcadfe4fb63930d4d9533fc2

IMPHASH c2079ffa39581e8679e84dfd475d100b
SHA256 b48cf1854b8ff73a0bb9d4e54b5811ea3ac7a5d3e0c6c57f8825a4de396f36cc
MD5 a8aba262bcadfe4fb63930d4d9533fc2
SHA1 2c5e2d715f6c19de2a4ec38da5c6c98536171c02
SHA512 f5dfaf99040f9b9a89890e90d0576a1d842745478ca902af4f8953330940f84314d0bff58d6e218a40841a73ee1ed0a01d2aba228085c7193ef2920cb8de0389
SSDEEP 24576:XIojPlC7PV2kKjW7zeYPmf1Bpw0BL3rd+2wl4W/Vpnr8dvWoNU:XTY7tDeNBpZBL36l4W/f81
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

7104

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\cuyupivifuh\ruvid\wihugicetuj\gelabov letex60\goluw.pdb

kernel32

GetNativeSystemInfo WriteConsoleInputW SetFilePointer CopyFileExW SetLocalTime InterlockedIncrement InterlockedDecrement WaitNamedPipeA CreateDirectoryW SetConsoleScreenBufferSize SetComputerNameW GetComputerNameW FreeEnvironmentStringsA CreateNamedPipeW VirtualFree GetConsoleAliasesLengthA GetPrivateProfileStringW GetPriorityClass ActivateActCtx FindResourceExA GlobalAlloc LoadLibraryW GetThreadSelectorEntry GetConsoleAliasExesLengthW InitAtomTable CreateSemaphoreA GetFileAttributesW GetBinaryTypeA GetSystemDirectoryA GetOverlappedResult CompareStringW EnumResourceNamesW GlobalUnlock InterlockedExchange ReleaseActCtx GetFileSizeEx GetStartupInfoA OpenMutexW GetHandleInformation GetCurrentDirectoryW GetProcAddress GetProcessHeaps WriteProfileSectionA ReadFileEx DisableThreadLibraryCalls ResetEvent LoadLibraryA GetConsoleScreenBufferInfo SetCurrentDirectoryW PostQueuedCompletionStatus SetEnvironmentVariableA WriteProfileStringA FatalAppExitA GetCurrentThreadId GetCPInfoExA GetVersionExA TlsAlloc FindAtomW DeleteFileW UnregisterWaitEx LCMapStringW AreFileApisANSI lstrlenW FileTimeToDosDateTime FlushFileBuffers GetLastError MoveFileA GetStartupInfoW HeapValidate IsBadReadPtr RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW RtlUnwind GetACP GetOEMCP GetCPInfo IsValidCodePage TlsGetValue GetModuleHandleW TlsSetValue TlsFree SetLastError DeleteCriticalSection EnterCriticalSection LeaveCriticalSection QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep ExitProcess FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetStdHandle GetFileType HeapDestroy HeapCreate HeapFree GetModuleFileNameA WriteFile HeapAlloc HeapSize HeapReAlloc VirtualAlloc MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW WideCharToMultiByte LCMapStringA InitializeCriticalSectionAndSpinCount GetModuleHandleA GetConsoleCP GetConsoleMode SetStdHandle WriteConsoleA GetConsoleOutputCP CreateFileA CloseHandle

gdi32

GetBoundsRect

winhttp

WinHttpOpen

Name

.text

Size

126KB

Virtual Size

126KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

36KB

Virtual Size

36KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

940KB

Virtual Size

46.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

193B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

16KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

80KB

Virtual Size

80KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

a8aba262bcadfe4fb63930d4d9533fc2

kernel32

gdi32

winhttp

generic