bced62dd489e2e210bd5145afa0177ac

General

Target
bced62dd489e2e210bd5145afa0177ac
Size 194KB
Sample240309-13jbrscf4t
SHA256 e439267dcf18cc31711d06c60f578a892aebb88e1cde0a2f40d5b877ac268c3a
MD5 bced62dd489e2e210bd5145afa0177ac
SHA1 8f7c03137d9051a7f0e1190e1aae815188f38161
SHA512 b119162f81b9658fbc49a424cb498bb54faa9ac27d2981a7328487a94c18d948ca926151afa2cb33a3e281bcf2162c70e28a8dea86943715bd99f7183a37416c
SSDEEP 3072:5aal8OhR/KOc/nDAnEttoTJ0jLahEL+y5AaZyvArywoOLi6:oa1hRNcPcnEMTJ0jLaWL+LQyvRwoOL
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bced62dd489e2e210bd5145afa0177ac

File Explorer

bced62dd489e2e210bd5145afa0177ac

.exe 194KB

bced62dd489e2e210bd5145afa0177ac

IMPHASH 41772127f978069b9f399090f08eba15
SHA256 e439267dcf18cc31711d06c60f578a892aebb88e1cde0a2f40d5b877ac268c3a
MD5 bced62dd489e2e210bd5145afa0177ac
SHA1 8f7c03137d9051a7f0e1190e1aae815188f38161
SHA512 b119162f81b9658fbc49a424cb498bb54faa9ac27d2981a7328487a94c18d948ca926151afa2cb33a3e281bcf2162c70e28a8dea86943715bd99f7183a37416c
SSDEEP 3072:5aal8OhR/KOc/nDAnEttoTJ0jLahEL+y5AaZyvArywoOLi6:oa1hRNcPcnEMTJ0jLaWL+LQyvRwoOL
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

64934

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\mabag\jozuze\maya.pdb

kernel32

LeaveCriticalSection GetConsoleAliasesLengthA InterlockedExchangeAdd CreateTapePartition GetSystemDefaultLCID CreateActCtxA GetCPInfoExW WriteConsoleInputW ReadConsoleInputA InitializeSListHead SetConsoleDisplayMode WriteConsoleA GetConsoleCP VerifyVersionInfoW CreateFileW WritePrivateProfileSectionW GetPrivateProfileSectionA EnumDateFormatsExA DeleteTimerQueue LoadLibraryA FlushInstructionCache SetConsoleCP FindFirstVolumeW ReadFile BuildCommDCBW VerLanguageNameW SetFileApisToANSI WriteProcessMemory SetEvent GetExitCodeThread EndUpdateResourceW GetCPInfoExA SetLastError UpdateResourceA SetConsoleTitleW FindClose LoadLibraryExA CopyFileW ReadConsoleA ZombifyActCtx CreateActCtxW HeapUnlock DnsHostnameToComputerNameW ReadConsoleOutputW GlobalFindAtomW GetSystemWindowsDirectoryW GetUserDefaultLCID BuildCommDCBAndTimeoutsA GetGeoInfoA GetCurrentProcess VirtualProtect GetProcAddress GetModuleHandleW CreateThread GetVersionExA GetProcessAffinityMask WaitForSingleObject SetConsoleCursorPosition VerifyVersionInfoA lstrlenA WriteConsoleOutputCharacterA GetFileAttributesExA GetComputerNameA CommConfigDialogW GetConsoleAliasA GetSystemTime GetDiskFreeSpaceW CreateFileA InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection RtlUnwind RaiseException GetLastError HeapFree TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapReAlloc HeapAlloc GetStartupInfoW LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetCPInfo TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc SetHandleCount GetStdHandle GetFileType GetStartupInfoA SetFilePointer ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA GetStringTypeW HeapSize EnumSystemLocalesA IsValidLocale InitializeCriticalSectionAndSpinCount SetStdHandle GetConsoleMode FlushFileBuffers GetLocaleInfoW GetConsoleOutputCP WriteConsoleW CloseHandle

user32

GetAltTabInfoW RealChildWindowFromPoint

Sharing

General

Malware Config

Signatures

File Explorer

bced62dd489e2e210bd5145afa0177ac

kernel32

user32

generic