a8b90c40140aa2e6115ee8f22c17068e

General

Target
a8b90c40140aa2e6115ee8f22c17068e
Size 583KB
Sample240227-km338sdb5w
SHA256 4b22fbc08005b6448d015e25cd97245df4bb1c2731c13db78afef37ee9ff020d
MD5 a8b90c40140aa2e6115ee8f22c17068e
SHA1 89ecce8c3e112c0a5bb55774cae903cece0b8a7c
SHA512 308a69f53fc185de8cb15d186135e21474f58dd6a871b0bbf1f1dfdb4e8e1d381327e09b0f59e9cc60892051a08a72b8c2d2e3a1f0677717b4e04603dad646d2
SSDEEP 12288:rOI5LUbbmMdkEPqrwbjYK6eMygPSMdnc6vx1PBCPE3nSZ8zRaC62:/UbbmMXgEXgPSMdnvPP8PswC
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a8b90c40140aa2e6115ee8f22c17068e

File Explorer

a8b90c40140aa2e6115ee8f22c17068e

.exe 583KB

a8b90c40140aa2e6115ee8f22c17068e

IMPHASH fbe702755e2fb4e20a84826fa92fd750
SHA256 4b22fbc08005b6448d015e25cd97245df4bb1c2731c13db78afef37ee9ff020d
MD5 a8b90c40140aa2e6115ee8f22c17068e
SHA1 89ecce8c3e112c0a5bb55774cae903cece0b8a7c
SHA512 308a69f53fc185de8cb15d186135e21474f58dd6a871b0bbf1f1dfdb4e8e1d381327e09b0f59e9cc60892051a08a72b8c2d2e3a1f0677717b4e04603dad646d2
SSDEEP 12288:rOI5LUbbmMdkEPqrwbjYK6eMygPSMdnc6vx1PBCPE3nSZ8zRaC62:/UbbmMXgEXgPSMdnvPP8PswC
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

9584

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\pexetezafip.pdb

kernel32

GetComputerNameA SetFilePointer lstrlenA GetConsoleAliasesLengthW CopyFileExW MapUserPhysicalPages FreeLibrary InterlockedIncrement InterlockedDecrement ZombifyActCtx GetNamedPipeHandleStateA GlobalLock GetProfileSectionA SetComputerNameW GetFileAttributesExA FreeEnvironmentStringsA GetProcessPriorityBoost GetTickCount GetCommConfig LocalFlags GetConsoleAliasesLengthA GetWindowsDirectoryA GetConsoleAliasExesW SetCommState TlsSetValue GetEnvironmentStrings FindResourceExA GlobalAlloc LoadLibraryW _hread GetCalendarInfoW GetSystemWow64DirectoryW GetSystemWindowsDirectoryA GetSystemTimeAdjustment InitAtomTable GetComputerNameExA GetBinaryTypeA GetAtomNameW ReadFile CompareStringW ExitThread SetConsoleTitleA VirtualUnlock LCMapStringA CreateDirectoryA ReleaseActCtx GetFileSizeEx SetCurrentDirectoryA GetStartupInfoA GetCPInfoExW GetCurrentDirectoryW GetProcAddress VerLanguageNameA SetFirmwareEnvironmentVariableW CreateNamedPipeA SetStdHandle BuildCommDCBW GetLocalTime LoadLibraryA Process32FirstW CreateSemaphoreW SetConsoleCtrlHandler WriteProfileSectionW Process32NextW WriteProfileStringA VirtualProtect GetCPInfoExA _lopen FindAtomW GetVolumeNameForVolumeMountPointW DeleteFileW GetCurrentProcessId ReadConsoleOutputCharacterW AreFileApisANSI CommConfigDialogW GetModuleHandleA GetLastError WideCharToMultiByte GetCommandLineA HeapValidate IsBadReadPtr RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW GetACP GetOEMCP GetCPInfo IsValidCodePage TlsGetValue GetModuleHandleW TlsAlloc GetCurrentThreadId TlsFree SetLastError LeaveCriticalSection EnterCriticalSection GetFileType WriteFile GetConsoleCP GetConsoleMode DeleteCriticalSection SetHandleCount GetStdHandle QueryPerformanceCounter GetSystemTimeAsFileTime Sleep ExitProcess GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW HeapDestroy HeapCreate HeapFree VirtualFree HeapAlloc HeapSize HeapReAlloc VirtualAlloc DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW RtlUnwind MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP CreateFileA CloseHandle FlushFileBuffers

user32

GetMenuInfo GetListBoxInfo

Sharing

General

Malware Config

Signatures

File Explorer

a8b90c40140aa2e6115ee8f22c17068e

kernel32

user32

generic