addf66c224aff122d02e27adb6f5830b

General

Target
addf66c224aff122d02e27adb6f5830b
Size 423KB
Sample240229-gx2flsgf31
SHA256 7218d54608e55779fd4b3bb6c7ea022a4ddf03ecc33c687209e87f937340e87a
MD5 addf66c224aff122d02e27adb6f5830b
SHA1 71d92b6db0f4dea263d21f29883e99fe2fdf77df
SHA512 9a0a784e9d50d25d7c81a9f1413f1b9307cc0f323b6407c100d1595495914484d15d4d30ce15bf741f6f3f4964b9b386157faeb400a9f68e3b8409de6321abc3
SSDEEP 6144:VwHAasCJ63x8tWcc8/gA9hCwyw+cl4o312IMnC3GSCcoPy9pIEKxm5b:EqC4GtWccEgAfVyjR4IC3GHTPy9pIDc
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
addf66c224aff122d02e27adb6f5830b

File Explorer

addf66c224aff122d02e27adb6f5830b

.exe 423KB

addf66c224aff122d02e27adb6f5830b

IMPHASH 162ff6c25457b1f40ac1c6c4d1ab5060
SHA256 7218d54608e55779fd4b3bb6c7ea022a4ddf03ecc33c687209e87f937340e87a
MD5 addf66c224aff122d02e27adb6f5830b
SHA1 71d92b6db0f4dea263d21f29883e99fe2fdf77df
SHA512 9a0a784e9d50d25d7c81a9f1413f1b9307cc0f323b6407c100d1595495914484d15d4d30ce15bf741f6f3f4964b9b386157faeb400a9f68e3b8409de6321abc3
SSDEEP 6144:VwHAasCJ63x8tWcc8/gA9hCwyw+cl4o312IMnC3GSCcoPy9pIEKxm5b:EqC4GtWccEgAfVyjR4IC3GHTPy9pIDc
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

9245

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\wabejupet.pdb

kernel32

GetConsoleAliasesLengthW WriteConsoleOutputCharacterA BuildCommDCBAndTimeoutsA InterlockedIncrement InterlockedDecrement GetCurrentProcess GetSystemWindowsDirectoryW SetEnvironmentVariableW GetSystemDefaultLCID GetModuleHandleW EnumCalendarInfoExW SetThreadUILanguage GetConsoleAliasesLengthA GetEnvironmentStrings GetConsoleCP ReadConsoleInputA SetVolumeMountPointA WriteConsoleOutputA LeaveCriticalSection lstrcpynW SetConsoleCursorPosition GetFileAttributesW IsBadWritePtr GetMailslotInfo GetModuleFileNameW GetTimeZoneInformation LocalUnlock lstrlenW FlushFileBuffers InterlockedExchange FillConsoleOutputCharacterW ChangeTimerQueueTimer SetLastError GetProcAddress PeekConsoleInputW BeginUpdateResourceW EnumDateFormatsExA CreateTimerQueueTimer GlobalGetAtomNameA ResetEvent GetLocalTime LoadLibraryA WriteConsoleA LocalAlloc SetConsoleOutputCP SetFileApisToANSI GetOEMCP GetModuleHandleA HeapSetInformation GetConsoleTitleW GetCPInfoExA FindFirstVolumeA ReleaseMutex DeleteTimerQueueTimer GetCurrentProcessId GetConsoleProcessList lstrcatA GetSystemDefaultLangID UnhandledExceptionFilter SetUnhandledExceptionFilter HeapAlloc GetCommandLineA GetStartupInfoA RaiseException RtlUnwind Sleep ExitProcess GetLastError WriteFile GetStdHandle GetModuleFileNameA TerminateProcess IsDebuggerPresent HeapFree DeleteCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate FreeEnvironmentStringsA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount HeapSize GetCPInfo GetACP IsValidCodePage GetLocaleInfoA LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW

user32

GetAltTabInfoW

Sharing

General

Malware Config

Signatures

File Explorer

addf66c224aff122d02e27adb6f5830b

kernel32

user32

generic