b51343949d1d8f2a8f6d1ef032ab38d6

General

Target
b51343949d1d8f2a8f6d1ef032ab38d6
Size 455KB
Sample240305-s8v9hsbd97
SHA256 b651d89218869ad000fbc5adce938959870296a9af7c787f8b52a854231e336d
MD5 b51343949d1d8f2a8f6d1ef032ab38d6
SHA1 196e5a36b5f71e8b8df828b894f38367cb228d9e
SHA512 c490fb0c10a66af4a2de0f039ef1abc515c0b1624d32caa118a98af86506bbf3b8b6a4934ff5e583f1ef402294a694a4cd52759d3ee0223b7d82d90e8812bc58
SSDEEP 12288:SzhvEM0RgOLI4xs6GIPpSOEvALL7T8ZR0Dqkec:St/0VLI4xjUOdLHT8n07
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b51343949d1d8f2a8f6d1ef032ab38d6

File Explorer

b51343949d1d8f2a8f6d1ef032ab38d6

.exe 455KB

b51343949d1d8f2a8f6d1ef032ab38d6

IMPHASH a70e187b34266b8bda252cd2ef2d0837
SHA256 b651d89218869ad000fbc5adce938959870296a9af7c787f8b52a854231e336d
MD5 b51343949d1d8f2a8f6d1ef032ab38d6
SHA1 196e5a36b5f71e8b8df828b894f38367cb228d9e
SHA512 c490fb0c10a66af4a2de0f039ef1abc515c0b1624d32caa118a98af86506bbf3b8b6a4934ff5e583f1ef402294a694a4cd52759d3ee0223b7d82d90e8812bc58
SSDEEP 12288:SzhvEM0RgOLI4xs6GIPpSOEvALL7T8ZR0Dqkec:St/0VLI4xjUOdLHT8n07
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

10030

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\yocokufelucuze_ciwugedetoco85\cinelifoja\lera zoguwen.pdb

kernel32

CreateTimerQueue WriteConsoleOutputCharacterW lstrlenA GetConsoleAliasesLengthW EnumDateFormatsExW GetDefaultCommConfigW HeapAlloc _lwrite InterlockedDecrement GetCurrentProcess GetSystemWindowsDirectoryW SetEnvironmentVariableW GetUserDefaultLCID SetConsoleScreenBufferSize SetVolumeMountPointW GetModuleHandleW GetConsoleAliasesLengthA GetCommandLineA GetEnvironmentStrings GetConsoleCP ReadConsoleInputA WriteConsoleOutputA GetComputerNameExA lstrcpynW GetFileAttributesW LocalReAlloc HeapQueryInformation IsBadWritePtr GetVolumeNameForVolumeMountPointA ReadFile GetTimeZoneInformation GetConsoleOutputCP InterlockedExchange ChangeTimerQueueTimer SetLastError GetProcAddress PeekConsoleInputW BeginUpdateResourceW RemoveDirectoryA EnterCriticalSection ResetEvent GetLocalTime LoadLibraryA OpenMutexA WriteConsoleA SetCalendarInfoW GlobalGetAtomNameW GetModuleFileNameA GetOEMCP GetConsoleTitleW BuildCommDCBA VirtualProtect GetFileAttributesExW FindFirstVolumeA ReleaseMutex GetCurrentProcessId GetConsoleProcessList EnumCalendarInfoExA GetMailslotInfo GetSystemDefaultLangID CreateFileA SetStdHandle UnhandledExceptionFilter SetUnhandledExceptionFilter Sleep ExitProcess GetStartupInfoA RaiseException RtlUnwind GetLastError WriteFile GetStdHandle TerminateProcess IsDebuggerPresent HeapFree LeaveCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId DeleteCriticalSection InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime VirtualAlloc HeapReAlloc GetCPInfo GetACP IsValidCodePage HeapSize GetLocaleInfoA GetConsoleMode FlushFileBuffers LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW SetFilePointer CloseHandle WriteConsoleW

user32

RealGetWindowClassA

Sharing

General

Malware Config

Signatures

File Explorer

b51343949d1d8f2a8f6d1ef032ab38d6

kernel32

user32

generic