ac6cf4bd1a554f44a2ce5542b30e6cc3

General

Target
ac6cf4bd1a554f44a2ce5542b30e6cc3
Size 1.1MB
Sample240228-vtpvashf25
SHA256 2dcd85215e085d1ed46a1f8840605bd49264096dbbd0e840c12607a8c0aacfa0
MD5 ac6cf4bd1a554f44a2ce5542b30e6cc3
SHA1 cdaaf79fc8cd25d4ae000ffe6f7a7d0c7324710c
SHA512 5d4e2ca9a7172d95d929cee8abc4915092ef2681a4549a5cc5e91d14f1387b2a08744622fb8e8dfc9d795d5fd6c5c53190b687d7e5afdef18aa05cddbd9a60b6
SSDEEP 24576:uF/GzdqS2G86ayfIR9V6P+r8QHuHHanLwE/7U0+9jrD90IYO:UGxqS2B6aWU98WrIH4UE/7Ufd3YO
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ac6cf4bd1a554f44a2ce5542b30e6cc3

File Explorer

ac6cf4bd1a554f44a2ce5542b30e6cc3

.exe 1.1MB

ac6cf4bd1a554f44a2ce5542b30e6cc3

IMPHASH 675f985c31bb43cb925f7664d8fe06b7
SHA256 2dcd85215e085d1ed46a1f8840605bd49264096dbbd0e840c12607a8c0aacfa0
MD5 ac6cf4bd1a554f44a2ce5542b30e6cc3
SHA1 cdaaf79fc8cd25d4ae000ffe6f7a7d0c7324710c
SHA512 5d4e2ca9a7172d95d929cee8abc4915092ef2681a4549a5cc5e91d14f1387b2a08744622fb8e8dfc9d795d5fd6c5c53190b687d7e5afdef18aa05cddbd9a60b6
SSDEEP 24576:uF/GzdqS2G86ayfIR9V6P+r8QHuHHanLwE/7U0+9jrD90IYO:UGxqS2B6aWU98WrIH4UE/7Ufd3YO
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8444

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\sigokutidaduko\ripajaluk\guleji.pdb

kernel32

EnumDateFormatsExW MoveFileExA EndUpdateResourceW InterlockedIncrement GetConsoleAliasA InterlockedDecrement WritePrivateProfileSectionA GetSystemWindowsDirectoryW GetEnvironmentStringsW WaitForSingleObject SetConsoleScreenBufferSize GetComputerNameW SetEvent GetConsoleAliasesLengthA GetConsoleTitleA ReadConsoleOutputA GetUserDefaultLangID CreateActCtxW GetConsoleCP LocalShrink GetVersionExW GetFileAttributesA DnsHostnameToComputerNameW lstrcpynW VerifyVersionInfoA IsBadWritePtr GetModuleFileNameW GetCompressedFileSizeA GetSystemDirectoryA lstrcatA GetACP GetVolumePathNameA lstrlenW SetConsoleTitleA FlushFileBuffers InterlockedExchange GetLastError GetProcAddress BeginUpdateResourceW LocalLock EnterCriticalSection GetLocalTime WriteConsoleA GetProcessId LocalAlloc SetCalendarInfoW CreateTapePartition SetConsoleDisplayMode GlobalGetAtomNameW SetEnvironmentVariableA GetModuleHandleA CancelTimerQueueTimer BuildCommDCBA VirtualProtect PeekConsoleInputA WriteConsoleOutputAttribute FindFirstVolumeW AreFileApisANSI LCMapStringW CreateFileW GetSystemDefaultLangID UnhandledExceptionFilter SetUnhandledExceptionFilter GetModuleHandleW Sleep ExitProcess GetStartupInfoW WriteFile GetStdHandle GetModuleFileNameA HeapAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId DeleteCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess IsDebuggerPresent LoadLibraryA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException VirtualAlloc HeapReAlloc GetCPInfo GetOEMCP IsValidCodePage RtlUnwind HeapSize GetLocaleInfoA WideCharToMultiByte GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA

user32

RealGetWindowClassA

advapi32

AdjustTokenPrivileges

Sharing

General

Malware Config

Signatures

File Explorer

ac6cf4bd1a554f44a2ce5542b30e6cc3

kernel32

user32

advapi32

generic