b641183407dfacaacd0f530fb5543a7f

General

Target
b641183407dfacaacd0f530fb5543a7f
Size 474KB
Sample240306-cn5dpagc7v
SHA256 b6b51b1ee6abf96a7bffd543c7736e5f3920d2cc299eef1a5f6c812d2af0fc07
MD5 b641183407dfacaacd0f530fb5543a7f
SHA1 adadf127465988c954c4417eef8fee19f915a834
SHA512 55744d0af3e2d66e30cbbf58f241443d7d26005b6a7d7287446badb2ad40685015fcb98eb5f76ae82a131f7a7a1c9d2902db7a188a7d6597b90fff51138a27e4
SSDEEP 6144:ypGwhdHewLtKpjO2pqvtyy4ufPcKF6VcZkRnySmJW7AK6P0MFFLPiXOwS18bEcxb:y1/ewLI6z4KsVcwySm4sK68MFtn4EcF
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b641183407dfacaacd0f530fb5543a7f

File Explorer

b641183407dfacaacd0f530fb5543a7f

.exe 474KB

b641183407dfacaacd0f530fb5543a7f

IMPHASH bcd64e2657251d69bf082a6790bd215d
SHA256 b6b51b1ee6abf96a7bffd543c7736e5f3920d2cc299eef1a5f6c812d2af0fc07
MD5 b641183407dfacaacd0f530fb5543a7f
SHA1 adadf127465988c954c4417eef8fee19f915a834
SHA512 55744d0af3e2d66e30cbbf58f241443d7d26005b6a7d7287446badb2ad40685015fcb98eb5f76ae82a131f7a7a1c9d2902db7a188a7d6597b90fff51138a27e4
SSDEEP 6144:ypGwhdHewLtKpjO2pqvtyy4ufPcKF6VcZkRnySmJW7AK6P0MFFLPiXOwS18bEcxb:y1/ewLI6z4KsVcwySm4sK68MFtn4EcF
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

10030

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\kacivexiy\91_y.pdb

kernel32

WriteConsoleOutputCharacterW GetConsoleAliasesLengthW EnumDateFormatsExW InterlockedIncrement InterlockedDecrement GetCurrentProcess SetEnvironmentVariableW GetSystemDefaultLCID GetModuleHandleW EnumCalendarInfoExW SetThreadUILanguage IsBadReadPtr GetConsoleAliasesLengthA GetUserDefaultLangID GetEnvironmentStrings GetConsoleCP ReadConsoleInputA SetVolumeMountPointA GetSystemWindowsDirectoryA WriteConsoleOutputA LeaveCriticalSection GetFileAttributesA lstrcpynW SetConsoleCursorPosition GetMailslotInfo ReadFile CreateTimerQueue GetTimeZoneInformation lstrcatA lstrlenW GetConsoleOutputCP InterlockedExchange FillConsoleOutputCharacterW GetLastError ChangeTimerQueueTimer GetProcAddress PeekConsoleInputW BeginUpdateResourceW ResetEvent GetLocalTime LoadLibraryA WriteConsoleA LocalAlloc BuildCommDCBAndTimeoutsW SetFileApisToANSI GetOEMCP HeapSetInformation GetConsoleTitleW GetCPInfoExA ReleaseMutex FindFirstVolumeW DeleteTimerQueueTimer GetCurrentProcessId GetConsoleProcessList GetModuleFileNameW LocalUnlock LCMapStringW LCMapStringA UnhandledExceptionFilter SetUnhandledExceptionFilter HeapAlloc Sleep ExitProcess GetCommandLineA GetStartupInfoA RaiseException RtlUnwind WriteFile GetStdHandle GetModuleFileNameA TerminateProcess IsDebuggerPresent HeapFree DeleteCriticalSection EnterCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetCPInfo GetACP IsValidCodePage HeapSize GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW

user32

GetAltTabInfoW

Sharing

General

Malware Config

Signatures

File Explorer

b641183407dfacaacd0f530fb5543a7f

kernel32

user32

generic