b5334158898c5032d7ffea47be538e97

General

Target
b5334158898c5032d7ffea47be538e97
Size 523KB
Sample240305-vh137acf74
SHA256 b50d54ca66704f005ff32b968635917aea96b684edd545912e62fdc55afc423a
MD5 b5334158898c5032d7ffea47be538e97
SHA1 6f18595795b3ed48701132921e96dd75f6bd1f77
SHA512 93010e3c6caca5fa63df93b297fb8975f27ea77a1601d34442835123d1ecb6cc0a862e447e0f843f0024beeed795f53e6b8a53267be49fbedcb45a7c9ca40af7
SSDEEP 12288:DJeQQ1o/VsUaOe3gNI6ewdxOt67akay2AQCA+/:VeQQxfObNa0xHakRW1
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b5334158898c5032d7ffea47be538e97

File Explorer

b5334158898c5032d7ffea47be538e97

.exe 523KB

b5334158898c5032d7ffea47be538e97

IMPHASH d7c1fa8bea76a22199cf71aae838fe49
SHA256 b50d54ca66704f005ff32b968635917aea96b684edd545912e62fdc55afc423a
MD5 b5334158898c5032d7ffea47be538e97
SHA1 6f18595795b3ed48701132921e96dd75f6bd1f77
SHA512 93010e3c6caca5fa63df93b297fb8975f27ea77a1601d34442835123d1ecb6cc0a862e447e0f843f0024beeed795f53e6b8a53267be49fbedcb45a7c9ca40af7
SSDEEP 12288:DJeQQ1o/VsUaOe3gNI6ewdxOt67akay2AQCA+/:VeQQxfObNa0xHakRW1
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

6336

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\ken8\cojujoh-vaxifoyago19\lojo-hozuyojosocudu\lizirafelome xej.pdb

kernel32

GetCommandLineW GetFileSize GetNativeSystemInfo lstrlenA TlsGetValue GetStringTypeA SetLocalTime FindResourceExW InterlockedIncrement GetQueuedCompletionStatus ReadConsoleA GetNamedPipeHandleStateA GlobalLock FreeEnvironmentStringsA GetModuleHandleW GetTickCount IsBadReadPtr GetSystemTimeAsFileTime GetPrivateProfileStringW WriteFile SetCommState GlobalAlloc GetPrivateProfileIntA LoadLibraryW GetSystemWindowsDirectoryA GetConsoleAliasExesLengthW IsDBCSLeadByte ReadFile GetStartupInfoW GlobalUnlock GetNamedPipeHandleStateW LCMapStringA GetPrivateProfileIntW InterlockedExchange GetStartupInfoA GetCPInfoExW GetLastError ReadConsoleOutputCharacterA GetProcAddress VirtualAlloc CopyFileA LoadLibraryA CreateSemaphoreW SetCurrentDirectoryW HeapWalk FindAtomA Process32NextW FreeEnvironmentStringsW EnumResourceNamesA GetCurrentThreadId DeleteFileW CopyFileExA MultiByteToWideChar GetCommandLineA HeapValidate RaiseException LeaveCriticalSection EnterCriticalSection SetStdHandle GetFileType WideCharToMultiByte GetConsoleCP GetConsoleMode DeleteCriticalSection GetModuleFileNameW InterlockedDecrement GetACP GetOEMCP GetCPInfo IsValidCodePage TlsAlloc TlsSetValue TlsFree SetLastError UnhandledExceptionFilter SetUnhandledExceptionFilter QueryPerformanceCounter GetCurrentProcessId Sleep ExitProcess GetModuleFileNameA GetEnvironmentStrings GetEnvironmentStringsW SetHandleCount GetStdHandle HeapDestroy HeapCreate HeapFree VirtualFree HeapAlloc TerminateProcess GetCurrentProcess IsDebuggerPresent HeapSize HeapReAlloc InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP WriteConsoleW SetFilePointer RtlUnwind DebugBreak OutputDebugStringA OutputDebugStringW LCMapStringW GetStringTypeW GetLocaleInfoA CreateFileA CloseHandle FlushFileBuffers

Sharing

General

Malware Config

Signatures

File Explorer

b5334158898c5032d7ffea47be538e97

kernel32

generic