b0f1fad905f5b31d70389bedcfc39caf

General

Target
b0f1fad905f5b31d70389bedcfc39caf
Size 1.0MB
Sample240304-cf2mtseh7s
SHA256 58dd074be5e51ca44f0c67ed712b3bb7a1afe1723adccdf3491636fef7cf1a2d
MD5 b0f1fad905f5b31d70389bedcfc39caf
SHA1 e5c9649d885178e8a313b63a6884b8cac99e6402
SHA512 609219da95929e3fc8f422ff2f34db7b8976680db773b424a8226171c2c5c78273e073bf13a8cd7455322dee7ff0826da8f0acec1ac11f011858b6d00248693d
SSDEEP 24576:xvYuQ6QxFTx6I0KCjYpE2heUuWZnJunRkP1I:xg53yKzpE2heU/RIRs
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b0f1fad905f5b31d70389bedcfc39caf

File Explorer

b0f1fad905f5b31d70389bedcfc39caf

.exe 1.0MB

b0f1fad905f5b31d70389bedcfc39caf

IMPHASH 55ad605eca715f8b898cdab75b98ba54
SHA256 58dd074be5e51ca44f0c67ed712b3bb7a1afe1723adccdf3491636fef7cf1a2d
MD5 b0f1fad905f5b31d70389bedcfc39caf
SHA1 e5c9649d885178e8a313b63a6884b8cac99e6402
SHA512 609219da95929e3fc8f422ff2f34db7b8976680db773b424a8226171c2c5c78273e073bf13a8cd7455322dee7ff0826da8f0acec1ac11f011858b6d00248693d
SSDEEP 24576:xvYuQ6QxFTx6I0KCjYpE2heUuWZnJunRkP1I:xg53yKzpE2heU/RIRs
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

970694

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\lewetoc\ditevasiv\muwu.pdb

kernel32

EnterCriticalSection GetConsoleAliasesLengthA InterlockedExchangeAdd CreateTapePartition GetSystemDefaultLCID CreateActCtxA GetCPInfoExW WriteConsoleInputW ReadConsoleInputW InitializeSListHead SetConsoleDisplayMode WriteConsoleA GetConsoleCP VerifyVersionInfoW CreateFileW WritePrivateProfileSectionW GetPrivateProfileSectionA EnumDateFormatsExA CancelTimerQueueTimer LoadLibraryA FlushInstructionCache SetConsoleCP FindFirstVolumeA ReadFile BuildCommDCBW VerLanguageNameW SetFileApisToANSI WriteProcessMemory LeaveCriticalSection SetEvent GetExitCodeThread EndUpdateResourceA GetCPInfoExA GetLastError UpdateResourceA SetConsoleTitleW FindClose LoadLibraryExA CopyFileW ReadConsoleA ZombifyActCtx AddRefActCtx HeapUnlock DnsHostnameToComputerNameW ReadConsoleOutputW GlobalFindAtomW GetSystemWindowsDirectoryW GetUserDefaultLCID BuildCommDCBAndTimeoutsA IsWow64Process UnmapViewOfFile GetAtomNameW HeapSize GetGeoInfoA GetCurrentProcess VirtualProtect GetProcAddress GetModuleHandleA CreateThread GetVersionExW GetProcessAffinityMask WaitForSingleObject SetConsoleCursorInfo VerifyVersionInfoA WriteConsoleOutputCharacterA GetFileAttributesExA GetComputerNameA CommConfigDialogW GetConsoleAliasA GetSystemTimeAsFileTime GetDiskFreeSpaceW InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection RaiseException RtlUnwind HeapReAlloc HeapAlloc GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter HeapFree TerminateProcess IsDebuggerPresent GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId SetHandleCount GetStdHandle GetFileType GetStartupInfoA SetFilePointer HeapCreate VirtualFree VirtualAlloc ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW InitializeCriticalSectionAndSpinCount SetStdHandle WideCharToMultiByte GetConsoleMode FlushFileBuffers LCMapStringA LCMapStringW GetConsoleOutputCP WriteConsoleW CloseHandle CreateFileA

user32

GetAltTabInfoA RealChildWindowFromPoint

Sharing

General

Malware Config

Signatures

File Explorer

b0f1fad905f5b31d70389bedcfc39caf

kernel32

user32

generic