b77be95511641ec3427fe9134a21f7fb

General

Target
b77be95511641ec3427fe9134a21f7fb
Size 601KB
Sample240306-qf96vsbe9s
SHA256 377f16192e6171888e519a56f5a0c26f9a72cd2d4ef5d7ae5a5a7aa0cc1eb01d
MD5 b77be95511641ec3427fe9134a21f7fb
SHA1 76f659f56ec8b1862b6693e72e29793f5c6602dd
SHA512 5b91a55e986fbfce3cf81499c72405e5bacf18b81f89b6e5ec2db8ffb75deb13ea8feb880595f0d37391a98f6cc9ff1136637f37cd90434ee8c23f27a855d7c3
SSDEEP 12288:hQJUMfKiphWF8ssKXRpFvmpNtNJqA1oL9am/DxA8v4oHvH+Hs:OGwRPzIfFvIJMUoLJTv48v
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b77be95511641ec3427fe9134a21f7fb

File Explorer

b77be95511641ec3427fe9134a21f7fb

.exe 601KB

b77be95511641ec3427fe9134a21f7fb

IMPHASH 99fb47aee8eea1acb06d4e446282b3db
SHA256 377f16192e6171888e519a56f5a0c26f9a72cd2d4ef5d7ae5a5a7aa0cc1eb01d
MD5 b77be95511641ec3427fe9134a21f7fb
SHA1 76f659f56ec8b1862b6693e72e29793f5c6602dd
SHA512 5b91a55e986fbfce3cf81499c72405e5bacf18b81f89b6e5ec2db8ffb75deb13ea8feb880595f0d37391a98f6cc9ff1136637f37cd90434ee8c23f27a855d7c3
SSDEEP 12288:hQJUMfKiphWF8ssKXRpFvmpNtNJqA1oL9am/DxA8v4oHvH+Hs:OGwRPzIfFvIJMUoLJTv48v
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

7728

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\wefofegahiyiv-koheb.pdb

kernel32

GetThreadContext EnumResourceNamesW GetFileSize SetPriorityClass GetNativeSystemInfo FindFirstChangeNotificationW lstrlenA SetLocalTime GetQueuedCompletionStatus GetSystemWindowsDirectoryW GetNamedPipeHandleStateA GetModuleHandleW GetTickCount GetConsoleAliasesLengthA GetSystemTimeAsFileTime GetPrivateProfileStringW ReadConsoleW WriteFile SetCommState GetCommandLineA FindResourceExA GetPrivateProfileIntA LoadLibraryW CopyFileW GetConsoleAliasExesLengthW SetConsoleMode IsDBCSLeadByte GetOverlappedResult GetStartupInfoW GlobalUnlock InterlockedExchange SetCurrentDirectoryA GetLastError ReadConsoleOutputCharacterA GetProcAddress VirtualAlloc WriteProfileSectionA ResetEvent LoadLibraryA OpenMutexA CreateSemaphoreW LocalAlloc IsSystemResumeAutomatic HeapWalk Process32NextW FreeEnvironmentStringsW EnumResourceNamesA GetCurrentThreadId GetCPInfoExA SetThreadAffinityMask TlsAlloc FindAtomW DeleteFileW LCMapStringW CopyFileExA MultiByteToWideChar HeapValidate IsBadReadPtr RaiseException EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW Sleep InterlockedIncrement InterlockedDecrement ExitProcess TlsGetValue TlsSetValue TlsFree SetLastError GetACP GetOEMCP GetCPInfo IsValidCodePage QueryPerformanceCounter GetCurrentProcessId GetEnvironmentStringsW GetCommandLineW HeapDestroy HeapCreate HeapFree VirtualFree GetModuleFileNameA HeapAlloc HeapSize HeapReAlloc SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW RtlUnwind LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP CloseHandle CreateFileA GetModuleHandleA

Sharing

General

Malware Config

Signatures

File Explorer

b77be95511641ec3427fe9134a21f7fb

kernel32

generic