abd9fa29f74bed2ba155464b2b0229cc

General

Target
abd9fa29f74bed2ba155464b2b0229cc
Size 493KB
Sample240228-pdj18abc4v
SHA256 8fd40b80a311796e80ebad31b54232250beb9225242df6bc45206a99ac0188e1
MD5 abd9fa29f74bed2ba155464b2b0229cc
SHA1 72ccd41c9e61bcf99aa5c75273351e78405c5b7f
SHA512 79950d246dd307fb90f4ddde3b5e40ebdc5d5af59812330d474dac9b251c9969d824bcf938c476eb56abb59b5c6e40883853bad911e59d3cb05a7a8ccc879ab0
SSDEEP 12288:uA3hlAtbBE+BUivQ0oLEBeKgZtH4Wr6pq:uSlAbLvQ0ome1jH4i
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
abd9fa29f74bed2ba155464b2b0229cc

File Explorer

abd9fa29f74bed2ba155464b2b0229cc

.exe 493KB

abd9fa29f74bed2ba155464b2b0229cc

IMPHASH 195398d48956ee3239680cf3c7e2e48d
SHA256 8fd40b80a311796e80ebad31b54232250beb9225242df6bc45206a99ac0188e1
MD5 abd9fa29f74bed2ba155464b2b0229cc
SHA1 72ccd41c9e61bcf99aa5c75273351e78405c5b7f
SHA512 79950d246dd307fb90f4ddde3b5e40ebdc5d5af59812330d474dac9b251c9969d824bcf938c476eb56abb59b5c6e40883853bad911e59d3cb05a7a8ccc879ab0
SSDEEP 12288:uA3hlAtbBE+BUivQ0oLEBeKgZtH4Wr6pq:uSlAbLvQ0ome1jH4i
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

5696

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\voconup\loxefazeka-loyimen3\humi8_pozasewizekur82\wiha.pdb

kernel32

GetComputerNameA UnregisterWait GetFileSize SetFilePointer lstrlenA GetConsoleAliasesLengthW GetConsoleAliasExesA GetConsoleAliasExesLengthA MapUserPhysicalPages FreeLibrary InterlockedIncrement InterlockedDecrement ZombifyActCtx CompareFileTime GetSystemWindowsDirectoryW GlobalLock VirtualFree GenerateConsoleCtrlEvent SetCommState SetProcessPriorityBoost TlsSetValue FindResourceExA GlobalAlloc LoadLibraryW GetCalendarInfoA GetSystemWow64DirectoryW SetSystemTimeAdjustment InitAtomTable GlobalFlags GetComputerNameExA GetConsoleAliasW GetBinaryTypeA ReadFile CompareStringW VirtualUnlock SetCurrentDirectoryA GetStartupInfoA GetCPInfoExW VerLanguageNameA SetFirmwareEnvironmentVariableW CreateNamedPipeA WriteProfileSectionA SetStdHandle SetComputerNameA VerLanguageNameW GetLocalTime LoadLibraryA CreateSemaphoreW Process32NextW CreateIoCompletionPort SetConsoleTitleW FreeEnvironmentStringsW EnumResourceNamesA WriteProfileStringW BuildCommDCBA VirtualProtect GetCurrentDirectoryA GetFileAttributesExW _lopen FindAtomW GetWindowsDirectoryW GetVersion GetVolumeNameForVolumeMountPointW ReadConsoleOutputCharacterW GetProfileSectionW LCMapStringW CopyFileExA AreFileApisANSI CommConfigDialogW DeleteFileA FlushFileBuffers GetCommandLineA HeapValidate IsBadReadPtr RaiseException GetModuleHandleW Sleep GetProcAddress ExitProcess TlsGetValue TlsAlloc GetCurrentThreadId TlsFree SetLastError GetLastError DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetModuleFileNameW SetUnhandledExceptionFilter QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType HeapDestroy HeapCreate HeapFree WriteFile HeapAlloc TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent HeapSize HeapReAlloc VirtualAlloc GetACP GetOEMCP GetCPInfo IsValidCodePage RtlUnwind InitializeCriticalSectionAndSpinCount DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW MultiByteToWideChar LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP GetConsoleMode WriteConsoleA GetConsoleOutputCP CreateFileA CloseHandle

user32

GetMessageTime GetMenuInfo

Sharing

General

Malware Config

Signatures

File Explorer

abd9fa29f74bed2ba155464b2b0229cc

kernel32

user32

generic