c5389739a7d360b304a3b13c3460965e

General

Target
c5389739a7d360b304a3b13c3460965e
Size 499KB
Sample240313-hethqafa7x
SHA256 48563774d84117ee0b49abf6efa77d2850b2beb923dd25b861192a547aa57f83
MD5 c5389739a7d360b304a3b13c3460965e
SHA1 2146a5ac12773cec9f6aa3ce2c1d986cb778a403
SHA512 fd24d80d43f6419a6f8c890e319d0d2e9c9670bc148ad48d703fe070cff3bf5e4dae7f5075d70e3248dd400fb693561f241b9e6704e88427b56ee84d711a31e1
SSDEEP 12288:G+okp9gppQQmympHgGijFode/CjGS366tLB5Hzg6kK8:nFn0WHgrj//CxFdHzvT8
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c5389739a7d360b304a3b13c3460965e

File Explorer

c5389739a7d360b304a3b13c3460965e

.exe 499KB

c5389739a7d360b304a3b13c3460965e

IMPHASH b9983337585a5531070ddcc78e55fc2d
SHA256 48563774d84117ee0b49abf6efa77d2850b2beb923dd25b861192a547aa57f83
MD5 c5389739a7d360b304a3b13c3460965e
SHA1 2146a5ac12773cec9f6aa3ce2c1d986cb778a403
SHA512 fd24d80d43f6419a6f8c890e319d0d2e9c9670bc148ad48d703fe070cff3bf5e4dae7f5075d70e3248dd400fb693561f241b9e6704e88427b56ee84d711a31e1
SSDEEP 12288:G+okp9gppQQmympHgGijFode/CjGS366tLB5Hzg6kK8:nFn0WHgrj//CxFdHzvT8
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

12080

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\xozayijat_ker kacoperovan\copo.pdb

kernel32

FileTimeToDosDateTime FindFirstChangeNotificationW lstrlenA CopyFileExW GetStringTypeA GetCPInfo InterlockedIncrement GetQueuedCompletionStatus ReadConsoleA CompareFileTime GlobalLock CancelWaitableTimer GetModuleHandleW GetCurrentThread GetSystemTimeAsFileTime WriteFile SetCommState GetCommandLineA GetPrivateProfileIntA LoadLibraryW CopyFileW GetSystemWindowsDirectoryA GetConsoleAliasExesLengthW GetVersionExW GlobalFlags IsProcessorFeaturePresent TerminateProcess SetThreadPriority GetStartupInfoW GetNamedPipeHandleStateW LCMapStringA GetPrivateProfileIntW CreateDirectoryA InterlockedExchange GetStartupInfoA SetThreadLocale GetLastError GetCurrentDirectoryW GetProcAddress SetFirmwareEnvironmentVariableW SearchPathA GetPrivateProfileStringA OpenWaitableTimerA LoadLibraryA Process32FirstW LocalAlloc GetFileType CreateFileMappingW SetCurrentDirectoryW SetThreadIdealProcessor HeapWalk FindAtomA SetEnvironmentVariableA QueryMemoryResourceNotification FreeEnvironmentStringsW EnumResourceNamesA RequestWakeupLatency GetCPInfoExA TlsAlloc FindAtomW ReadConsoleOutputCharacterW GetSystemTime GetProfileSectionW DeleteFileA CreateFileA InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection MultiByteToWideChar UnhandledExceptionFilter SetUnhandledExceptionFilter GetModuleFileNameW HeapValidate IsBadReadPtr RaiseException RtlUnwind GetCurrentProcess IsDebuggerPresent GetACP GetOEMCP IsValidCodePage TlsGetValue TlsSetValue GetCurrentThreadId TlsFree SetLastError QueryPerformanceCounter GetTickCount GetCurrentProcessId ExitProcess GetEnvironmentStringsW GetCommandLineW SetHandleCount GetStdHandle HeapDestroy HeapCreate HeapFree VirtualFree GetModuleFileNameA FlushFileBuffers WideCharToMultiByte GetConsoleCP GetConsoleMode DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW HeapAlloc HeapSize HeapReAlloc VirtualAlloc InitializeCriticalSectionAndSpinCount LCMapStringW GetStringTypeW GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP SetFilePointer CloseHandle

user32

GetComboBoxInfo

msimg32

TransparentBlt

Sharing

General

Malware Config

Signatures

File Explorer

c5389739a7d360b304a3b13c3460965e

kernel32

user32

msimg32

generic