b7be87f68035db926317eb59c289fcd3

General

Target
b7be87f68035db926317eb59c289fcd3
Size 1.2MB
Sample240306-swwdrabd75
SHA256 641ddfbeb79686d53e97f99b043550cde7d19ef91c6e611f02ad80f33daaf4ad
MD5 b7be87f68035db926317eb59c289fcd3
SHA1 186f7e4ea34132f74b556de4aa0bb795fb7c6eab
SHA512 305a4fc92f4ca5e4e4956c69ed4f105eb2f2b460a768d9e6ed5790ce31aa2335a8573695803dff2b1ac88356d7b6c3b7a676c8912dbfa0aeca751217481b8eff
SSDEEP 12288:rVCb/f147wpOPaTWOSPPwzAXK2PA22zmof8job+hg8njpC2GpldNDtlqiZUBbAcr:Sf147s4yR2Pjgf8sKu7p1q9ACwGBa
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b7be87f68035db926317eb59c289fcd3

File Explorer

b7be87f68035db926317eb59c289fcd3

.exe 1.2MB

b7be87f68035db926317eb59c289fcd3

IMPHASH df9f8478a5324ab8dd6d2dd50515fa50
SHA256 641ddfbeb79686d53e97f99b043550cde7d19ef91c6e611f02ad80f33daaf4ad
MD5 b7be87f68035db926317eb59c289fcd3
SHA1 186f7e4ea34132f74b556de4aa0bb795fb7c6eab
SHA512 305a4fc92f4ca5e4e4956c69ed4f105eb2f2b460a768d9e6ed5790ce31aa2335a8573695803dff2b1ac88356d7b6c3b7a676c8912dbfa0aeca751217481b8eff
SSDEEP 12288:rVCb/f147wpOPaTWOSPPwzAXK2PA22zmof8job+hg8njpC2GpldNDtlqiZUBbAcr:Sf147s4yR2Pjgf8sKu7p1q9ACwGBa
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8624

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\comagagetepepu\cetukuku\66\yeb\kuhepemam.pdb

kernel32

GetFileSize GlobalDeleteAtom SetFilePointer lstrlenA CopyFileExW SetLocalTime CommConfigDialogA MapUserPhysicalPages FreeLibrary InterlockedIncrement GetCommState InterlockedDecrement ZombifyActCtx SetFirmwareEnvironmentVariableA GetSystemWindowsDirectoryW GlobalLock GetComputerNameW CreateDirectoryExA FreeEnvironmentStringsA GetProcessPriorityBoost GetTickCount GetCommConfig GetConsoleAliasesLengthA GetWindowsDirectoryA GetConsoleAliasExesW WriteFile FindActCtxSectionStringA TlsSetValue GlobalAlloc GetSystemDirectoryW VirtualFreeEx LoadLibraryW GetConsoleMode _hread GetSystemWow64DirectoryW SetSystemTimeAdjustment GlobalFlags GetBinaryTypeA GetAtomNameW ReadFile ExitThread SetConsoleTitleA VirtualUnlock DeactivateActCtx GetNamedPipeHandleStateW ReleaseActCtx GetStartupInfoA GetCPInfoExW GetCurrentDirectoryW ReadConsoleOutputCharacterA GetProcAddress GetProcessHeaps GetComputerNameExW CreateNamedPipeA SetStdHandle SetComputerNameA VerLanguageNameW LoadLibraryA Process32FirstW CreateSemaphoreW SetCalendarInfoW SetConsoleCtrlHandler SetCurrentDirectoryW WriteProfileSectionW SetConsoleWindowInfo FindAtomA Process32NextW QueryMemoryResourceNotification WriteProfileStringW BuildCommDCBA VirtualProtect CompareStringA GetFileAttributesExW _lopen TlsAlloc GetVolumeNameForVolumeMountPointW GetCurrentProcessId GetProfileSectionW LCMapStringW DeleteFileA GetLastError WideCharToMultiByte GetCommandLineA HeapValidate IsBadReadPtr RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW GetACP GetOEMCP GetCPInfo IsValidCodePage TlsGetValue GetModuleHandleW GetCurrentThreadId TlsFree SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection QueryPerformanceCounter GetSystemTimeAsFileTime Sleep ExitProcess GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType HeapDestroy HeapCreate HeapFree VirtualFree HeapAlloc HeapSize HeapReAlloc VirtualAlloc DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW RtlUnwind MultiByteToWideChar LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP InitializeCriticalSectionAndSpinCount FlushFileBuffers WriteConsoleA GetConsoleOutputCP CloseHandle CreateFileA GetModuleHandleA

user32

GetMenuInfo GetListBoxInfo

Name

.text

Size

161KB

Virtual Size

161KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

45KB

Virtual Size

44KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

943KB

Virtual Size

1.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

193B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

25KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

17KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

b7be87f68035db926317eb59c289fcd3

kernel32

user32

generic