c857d1c121d19ef45ed5b8c9d5812d43

General

Target
c857d1c121d19ef45ed5b8c9d5812d43
Size 466KB
Sample240314-l2jhtabe62
SHA256 9eac1828152c86d73ece95e636fdf83d54b8658a8f7175aac48e96127e13f064
MD5 c857d1c121d19ef45ed5b8c9d5812d43
SHA1 3f28fbea50abc4e491a8524a86b63aa83abf4fd5
SHA512 7650eab90350cfa4c7466c3039a32c49a40cd1b32489ab5ae197831b80afd0bcc7da4f1796ad2e22bd196b7100705cdfcd2058e84355b27f11ea667c58e17e34
SSDEEP 6144:sGZEeEkidKB4kk3SKFuR2QS4SvpXKbM3d3vFd1p1NLVBhLyXczl:PZkkiYq33U7SZFd3vFd1p1NZXysz
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c857d1c121d19ef45ed5b8c9d5812d43

File Explorer

c857d1c121d19ef45ed5b8c9d5812d43

.exe 466KB

c857d1c121d19ef45ed5b8c9d5812d43

IMPHASH 1cd2cdaf0d3244745bbba0ea35647dc9
SHA256 9eac1828152c86d73ece95e636fdf83d54b8658a8f7175aac48e96127e13f064
MD5 c857d1c121d19ef45ed5b8c9d5812d43
SHA1 3f28fbea50abc4e491a8524a86b63aa83abf4fd5
SHA512 7650eab90350cfa4c7466c3039a32c49a40cd1b32489ab5ae197831b80afd0bcc7da4f1796ad2e22bd196b7100705cdfcd2058e84355b27f11ea667c58e17e34
SSDEEP 6144:sGZEeEkidKB4kk3SKFuR2QS4SvpXKbM3d3vFd1p1NLVBhLyXczl:PZkkiYq33U7SZFd3vFd1p1NZXysz
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

352758

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\suse\nimeton.pdb

kernel32

GetCPInfoExW WriteConsoleInputW ReadConsoleInputA GetConsoleAliasW SetCommTimeouts InitializeSListHead GetConsoleDisplayMode CreateConsoleScreenBuffer GetConsoleCP VerifyVersionInfoW WaitNamedPipeA CreateMutexW WriteConsoleA SetLastError CreateFileA WritePrivateProfileSectionW GetPrivateProfileSectionW EnumDateFormatsExW SetStdHandle LoadLibraryW RequestDeviceWakeup FindFirstVolumeA ReadFile BuildCommDCBA VerLanguageNameA SetFileApisToANSI WriteProcessMemory ResetEvent Sleep EndUpdateResourceA GetCPInfo SetConsoleCtrlHandler SetConsoleTitleW SetFilePointer CreateActCtxW CopyFileW AttachConsole GetConsoleAliasesLengthW ReleaseActCtx ReadConsoleOutputW GetSystemWindowsDirectoryA GetStringTypeW BuildCommDCBAndTimeoutsA HeapAlloc HeapLock GetAtomNameA GlobalSize HeapValidate GetGeoInfoA GetCurrentProcess VirtualProtect GetProcAddress GetModuleHandleA CreateThread GetVersionExA GetOEMCP WaitForSingleObject GetSystemPowerStatus WriteConsoleOutputCharacterW LocalAlloc GetMailslotInfo SetEnvironmentVariableA GetFileAttributesExA GetComputerNameW CommConfigDialogA GetConsoleWindow GetDiskFreeSpaceW GetLongPathNameW GetUserDefaultLangID GetCurrentConsoleFont LeaveCriticalSection InterlockedIncrement InterlockedDecrement InitializeCriticalSection DeleteCriticalSection EnterCriticalSection RaiseException RtlUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW GetLastError HeapFree TerminateProcess IsDebuggerPresent GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId SetHandleCount GetStdHandle GetFileType GetStartupInfoA VirtualFree VirtualAlloc HeapReAlloc HeapCreate ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar InitializeCriticalSectionAndSpinCount LoadLibraryA WideCharToMultiByte GetConsoleMode FlushFileBuffers LCMapStringA LCMapStringW GetConsoleOutputCP WriteConsoleW CloseHandle

user32

GetAltTabInfoA

gdi32

GetCharWidth32A

advapi32

AdjustTokenPrivileges BackupEventLogA

Sharing

General

Malware Config

Signatures

File Explorer

c857d1c121d19ef45ed5b8c9d5812d43

kernel32

user32

gdi32

advapi32

generic