5aa92bfd228195b36e88e6b22e27a4802596d1c7803d20b0d943f0207e563844[.]exe

General

Target
5aa92bfd228195b36e88e6b22e27a4802596d1c7803d20b0d943f0207e563844.exe
Size 246KB
Sample240228-t7z2ragf59
SHA256 5aa92bfd228195b36e88e6b22e27a4802596d1c7803d20b0d943f0207e563844
MD5 1cd3c2e75712a802da37953a5353c2dd
SHA1 dbf518d4fd9a0a81e9135298b2324a0b233ec1eb
SHA512 6911c246d7e4ce906a02c10a5d2200ee8e24beb3a2e2797d38893c198449748e8e0b044787b6014a1dc60fe2e90308927679ef132586d284bab4e66e0b2830bb
SSDEEP 3072:0He/xSqNDIlSbDq8jy5MjuU1wotF/BY/aiW86zXlAwm4o6FoYijJQXj6Kl5Jc3x:XZWlSyYygKotQr6OwM6zkSWKB
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5aa92bfd228195b36e88e6b22e27a4802596d1c7803d20b0d943f0207e563844.exe

File Explorer

5aa92bfd228195b36e88e6b22e27a4802596d1c7803d20b0d943f0207e563844.exe

.exe 246KB

5aa92bfd228195b36e88e6b22e27a4802596d1c7803d20b0d943f0207e563844.exe

IMPHASH ec271c4b8f7c72276e9c3f3c54af2f17
SHA256 5aa92bfd228195b36e88e6b22e27a4802596d1c7803d20b0d943f0207e563844
MD5 1cd3c2e75712a802da37953a5353c2dd
SHA1 dbf518d4fd9a0a81e9135298b2324a0b233ec1eb
SHA512 6911c246d7e4ce906a02c10a5d2200ee8e24beb3a2e2797d38893c198449748e8e0b044787b6014a1dc60fe2e90308927679ef132586d284bab4e66e0b2830bb
SSDEEP 3072:0He/xSqNDIlSbDq8jy5MjuU1wotF/BY/aiW86zXlAwm4o6FoYijJQXj6Kl5Jc3x:XZWlSyYygKotQr6OwM6zkSWKB
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

10071

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\pujukafumaj84\piyekotecuz\27\kakadoxerihi.pdb

kernel32

ReadConsoleA GetCurrentProcess GetComputerNameW CreateDirectoryExA GetModuleHandleW GetTickCount GenerateConsoleCtrlEvent FindNextVolumeMountPointA ReadConsoleW CreateRemoteThread GetConsoleAliasExesW GlobalAlloc GetVolumeInformationA GlobalFindAtomA GetLocaleInfoW GetConsoleAliasExesLengthW GetTimeFormatW GetConsoleAliasW FlushFileBuffers GetLastError InterlockedIncrement GetProcAddress VirtualAlloc RemoveDirectoryA SetStdHandle SetComputerNameA GetTempFileNameA LoadLibraryA WriteConsoleA InterlockedExchangeAdd GetNumberFormatW GetConsoleTitleW GetFileAttributesExW ReadConsoleInputW AddConsoleAliasA CloseHandle SetLastError CreateFileA TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA HeapAlloc HeapFree RaiseException TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId InterlockedDecrement SetFilePointer EnterCriticalSection LeaveCriticalSection Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc GetModuleHandleA RtlUnwind HeapSize InitializeCriticalSectionAndSpinCount GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA

user32

CharUpperBuffA GetAltTabInfoA SetMenu LoadKeyboardLayoutW

advapi32

RegSetValueW

Sharing