caa5f3d5d0174f7bb2aa4da093d66674

General

Target
caa5f3d5d0174f7bb2aa4da093d66674
Size 520KB
Sample240315-gl6wysbe92
SHA256 12e161db75470e5e06c98e0ace41cf08cfc15672c7f6b01674fb1b5add20f336
MD5 caa5f3d5d0174f7bb2aa4da093d66674
SHA1 1f7df39ab943a2ecf44c376f581687af13f06bf2
SHA512 4f40e433ef7eb798347c27a31d2bbbe332009fecd7347f224d1a571cce71a4e8b1dc8cb405373136687a473707394081e647c1536d63ce5578ab1936c05ef14c
SSDEEP 12288:oPcmFAjDIoSoH+f1kAAqhdZ1xv51m5/WFVzaylI:GFAjcf1Z5hje/CVzaa
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
caa5f3d5d0174f7bb2aa4da093d66674

File Explorer

caa5f3d5d0174f7bb2aa4da093d66674

.exe 520KB

caa5f3d5d0174f7bb2aa4da093d66674

IMPHASH 35372ade599ee63db174ac99307517b7
SHA256 12e161db75470e5e06c98e0ace41cf08cfc15672c7f6b01674fb1b5add20f336
MD5 caa5f3d5d0174f7bb2aa4da093d66674
SHA1 1f7df39ab943a2ecf44c376f581687af13f06bf2
SHA512 4f40e433ef7eb798347c27a31d2bbbe332009fecd7347f224d1a571cce71a4e8b1dc8cb405373136687a473707394081e647c1536d63ce5578ab1936c05ef14c
SSDEEP 12288:oPcmFAjDIoSoH+f1kAAqhdZ1xv51m5/WFVzaylI:GFAjcf1Z5hje/CVzaa
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8416

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\lidobu\higiperosar.pdb

kernel32

GetCommandLineW FileTimeToDosDateTime EnumResourceNamesW SetThreadContext GetNativeSystemInfo lstrlenA GetConsoleAliasesLengthW CopyFileExW TlsGetValue GetDriveTypeW SetEndOfFile InterlockedIncrement GetCommState InterlockedDecrement GetSystemWindowsDirectoryW GetNamedPipeHandleStateA WaitForSingleObject SetEvent FreeEnvironmentStringsA GetModuleHandleW GetTickCount VirtualFree GetSystemTimeAsFileTime WriteFile GetPriorityClass GetPrivateProfileIntA LoadLibraryW GetConsoleMode GetVersionExW SetConsoleMode SetConsoleCursorPosition IsDBCSLeadByte GetOverlappedResult GetStartupInfoW GlobalUnlock LCMapStringA GetFileSizeEx GetCPInfoExW GetLastError SetLastError GetProcAddress CopyFileA GetPrivateProfileStringA OpenMutexA LocalAlloc IsSystemResumeAutomatic SetCurrentDirectoryW WriteProfileSectionW HeapWalk FindAtomA Process32NextW CreateIoCompletionPort FindFirstChangeNotificationA FreeEnvironmentStringsW CompareStringA FatalAppExitA GetCurrentThreadId SetThreadAffinityMask OpenSemaphoreW DeleteFileW ReadConsoleOutputCharacterW GetSystemTime FlushFileBuffers UnhandledExceptionFilter SetUnhandledExceptionFilter MultiByteToWideChar HeapValidate IsBadReadPtr RaiseException Sleep ExitProcess GetModuleFileNameA GetStdHandle TlsAlloc TlsSetValue TlsFree TerminateProcess GetCurrentProcess IsDebuggerPresent GetModuleFileNameW DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetACP GetOEMCP GetCPInfo IsValidCodePage QueryPerformanceCounter GetCurrentProcessId GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA HeapDestroy HeapCreate HeapFree HeapAlloc HeapSize HeapReAlloc VirtualAlloc LoadLibraryA InitializeCriticalSectionAndSpinCount RtlUnwind SetFilePointer WideCharToMultiByte GetConsoleCP DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP CreateFileA CloseHandle GetModuleHandleA

user32

GetTitleBarInfo

winhttp

WinHttpReadData

Sharing

General

Malware Config

Signatures

File Explorer

caa5f3d5d0174f7bb2aa4da093d66674

kernel32

user32

winhttp

generic