bd5e92e335c0bccfb3fd1d30153febaa

General

Target
bd5e92e335c0bccfb3fd1d30153febaa
Size 376KB
Sample240310-cd72tshb52
SHA256 9298e3252c84af5631a95ba5174794beada8b746917c971459ad0bdedd91d4d8
MD5 bd5e92e335c0bccfb3fd1d30153febaa
SHA1 4e769223c6388321ab6cb5c71a130779c98fa468
SHA512 890d2e8b86771e15e6feac65f21458fe543f1fe49f156ae64155cfe61135ac35f92f66e21ba3827584f440645359a6a9b35f96af5461f38f9e5570a7b97224ef
SSDEEP 6144:tnCryGiAV3dhUcC5rXPRjWUyLYwl8bRgfmDnWpSSwmfk6LNuv+JQMz:Ir9iGthUcyXP9N4/l3fQTSRfnwv+JP
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd5e92e335c0bccfb3fd1d30153febaa

File Explorer

bd5e92e335c0bccfb3fd1d30153febaa

.exe 376KB

bd5e92e335c0bccfb3fd1d30153febaa

IMPHASH 3253baac7b96bb829538a388ffb0c01e
SHA256 9298e3252c84af5631a95ba5174794beada8b746917c971459ad0bdedd91d4d8
MD5 bd5e92e335c0bccfb3fd1d30153febaa
SHA1 4e769223c6388321ab6cb5c71a130779c98fa468
SHA512 890d2e8b86771e15e6feac65f21458fe543f1fe49f156ae64155cfe61135ac35f92f66e21ba3827584f440645359a6a9b35f96af5461f38f9e5570a7b97224ef
SSDEEP 6144:tnCryGiAV3dhUcC5rXPRjWUyLYwl8bRgfmDnWpSSwmfk6LNuv+JQMz:Ir9iGthUcyXP9N4/l3fQTSRfnwv+JP
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8896

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\nutumikirujig15 mimir\hu.pdb

kernel32

FindFirstChangeNotificationW SetFilePointer lstrlenA CopyFileExW InterlockedIncrement GetQueuedCompletionStatus GetCommState InterlockedDecrement CompareFileTime GetSystemWindowsDirectoryW GetNamedPipeHandleStateA WaitForSingleObject OpenSemaphoreA FreeEnvironmentStringsA GetTickCount VirtualFree GetConsoleAliasesLengthA GetPrivateProfileStringW WaitNamedPipeW WriteFile GetCommandLineA GetDriveTypeA TlsSetValue GetPriorityClass GlobalAlloc LoadLibraryW GetConsoleMode TerminateThread SetConsoleMode IsProcessorFeaturePresent GetBinaryTypeW GetOverlappedResult SetThreadContext GetStartupInfoW GlobalUnlock CreateDirectoryA ReleaseActCtx GetFileSizeEx SetCurrentDirectoryA GetCPInfoExW OpenMutexW GetLastError IsDBCSLeadByteEx ReadConsoleOutputCharacterA GetProcAddress CopyFileA ResetEvent LoadLibraryA CreateSemaphoreW WriteProfileSectionW HeapWalk FindAtomA Process32NextW SetConsoleTitleW GetModuleHandleA EnumResourceNamesA WriteProfileStringW GetConsoleCursorInfo FatalAppExitA GetCurrentThreadId GetVersionExA GetSystemTime LCMapStringW DeleteFileA CompareStringW UnregisterWait WideCharToMultiByte GetStartupInfoA HeapValidate IsBadReadPtr RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW GetACP GetOEMCP GetCPInfo IsValidCodePage TlsGetValue GetModuleHandleW TlsAlloc TlsFree SetLastError Sleep ExitProcess EnterCriticalSection LeaveCriticalSection DeleteCriticalSection QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType HeapDestroy HeapCreate HeapFree HeapAlloc HeapSize HeapReAlloc VirtualAlloc DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW RtlUnwind MultiByteToWideChar LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA InitializeCriticalSectionAndSpinCount GetConsoleCP SetStdHandle WriteConsoleA GetConsoleOutputCP FlushFileBuffers CreateFileA CloseHandle

gdi32

GetCharWidthW

winhttp

WinHttpCloseHandle

Sharing

General

Malware Config

Signatures

File Explorer

bd5e92e335c0bccfb3fd1d30153febaa

kernel32

gdi32

winhttp

generic