b1319199a0b2ffbce63d2733f9e1553a

General

Target
b1319199a0b2ffbce63d2733f9e1553a
Size 328KB
Sample240304-etfzdshe4x
SHA256 703cd697f305a6d7568d3cdc517fede7c6a8947c9304cf812a133ed53753dff4
MD5 b1319199a0b2ffbce63d2733f9e1553a
SHA1 a5be805f7ad6cbb4330a5c63b5621af667060fe0
SHA512 eb42cb690b2c18580170a5d66d10510f7c282d317d0752d0177d6c0cd1ac40e44c1349544e778bc78f5b1dcc34d26a9b86e8ccf38e4355f4ac505e6038e55527
SSDEEP 6144:MIxvu15nsVFKlDg24H0qRZL0MdJydHmr1NEDmGFUs6Hdk72Rq:zG5niwDSHtZgMT0Ha1BGFA9m2R
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b1319199a0b2ffbce63d2733f9e1553a

File Explorer

b1319199a0b2ffbce63d2733f9e1553a

.exe 328KB

b1319199a0b2ffbce63d2733f9e1553a

IMPHASH a8e8f7e40cd1f1ebf1a32e88b1d28194
SHA256 703cd697f305a6d7568d3cdc517fede7c6a8947c9304cf812a133ed53753dff4
MD5 b1319199a0b2ffbce63d2733f9e1553a
SHA1 a5be805f7ad6cbb4330a5c63b5621af667060fe0
SHA512 eb42cb690b2c18580170a5d66d10510f7c282d317d0752d0177d6c0cd1ac40e44c1349544e778bc78f5b1dcc34d26a9b86e8ccf38e4355f4ac505e6038e55527
SSDEEP 6144:MIxvu15nsVFKlDg24H0qRZL0MdJydHmr1NEDmGFUs6Hdk72Rq:zG5niwDSHtZgMT0Ha1BGFA9m2R
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

9568

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\pan nudododu_horalayen92_vuwiyaku.pdb

kernel32

SetFilePointer lstrlenA CopyFileExW MapUserPhysicalPages FreeLibrary InterlockedIncrement GetCommState InterlockedDecrement ZombifyActCtx GetSystemWindowsDirectoryW GetNamedPipeHandleStateA GlobalLock SetComputerNameW GetComputerNameW FreeEnvironmentStringsA GetProcessPriorityBoost GetTickCount GetCommConfig GetConsoleAliasesLengthA GetWindowsDirectoryA GetConsoleAliasExesW TlsSetValue GetEnvironmentStrings FindResourceExA GlobalAlloc LoadLibraryW _hread GetCalendarInfoA GetSystemWow64DirectoryW GetSystemTimeAdjustment InitAtomTable GlobalFlags GetComputerNameExA GetBinaryTypeA GetAtomNameW ReadFile CompareStringW ExitThread VirtualUnlock LCMapStringA CreateDirectoryA ReleaseActCtx GetFileSizeEx GetStartupInfoA GetCurrentDirectoryW GetProcAddress VerLanguageNameA SetFirmwareEnvironmentVariableW CreateNamedPipeA SetStdHandle BuildCommDCBW GetLocalTime LoadLibraryA Process32FirstW CreateSemaphoreW SetConsoleCtrlHandler SetCurrentDirectoryW WriteProfileSectionW WriteProfileStringA SetConsoleTitleW VirtualProtect GetFileAttributesExW GetCPInfoExA _lopen FindAtomW GetVolumeNameForVolumeMountPointW DeleteFileW GetCurrentProcessId ReadConsoleOutputCharacterW GetProfileSectionW AreFileApisANSI CommConfigDialogW GetLastError WideCharToMultiByte GetCommandLineA HeapValidate IsBadReadPtr RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW GetACP GetOEMCP GetCPInfo IsValidCodePage TlsGetValue GetModuleHandleW TlsAlloc GetCurrentThreadId TlsFree SetLastError LeaveCriticalSection EnterCriticalSection GetFileType WriteFile GetConsoleCP GetConsoleMode DeleteCriticalSection SetHandleCount GetStdHandle QueryPerformanceCounter GetSystemTimeAsFileTime Sleep ExitProcess GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW HeapDestroy HeapCreate HeapFree VirtualFree HeapAlloc HeapSize HeapReAlloc VirtualAlloc DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW RtlUnwind MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP CreateFileA CloseHandle FlushFileBuffers GetModuleHandleA

user32

GetMenuInfo GetListBoxInfo

Sharing

General

Malware Config

Signatures

File Explorer

b1319199a0b2ffbce63d2733f9e1553a

kernel32

user32

generic