cbf99c5950929c2aecac3b6244b124c4

General

Target
cbf99c5950929c2aecac3b6244b124c4
Size 579KB
Sample240315-vtrc5adh7x
SHA256 267e80d62ad886f9b3db43bbcb3480bfcdb6cfaa8b7caa687536108f4c7ac851
MD5 cbf99c5950929c2aecac3b6244b124c4
SHA1 1c83aed9a714f0faa40d22dd0f5ab4e42a6a0a76
SHA512 e68ea194e99d7a290a20efe45909e86b885520813910e5aa54bebc1133a7252d5e2564b399721dcb65c74113da87bb45963e871d3b3185e4ac8e3b94c1ece128
SSDEEP 12288:2mdySX5NBrQAZiyEeHcSnGpXLHkTZsfBQE91PDgWhnZ/skeL2PMY:2G5NBrQA3+XLElsfSELDgGnmkjr
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cbf99c5950929c2aecac3b6244b124c4

File Explorer

cbf99c5950929c2aecac3b6244b124c4

.exe 579KB

cbf99c5950929c2aecac3b6244b124c4

IMPHASH f072aaf7476b5a5a056c892b505526e0
SHA256 267e80d62ad886f9b3db43bbcb3480bfcdb6cfaa8b7caa687536108f4c7ac851
MD5 cbf99c5950929c2aecac3b6244b124c4
SHA1 1c83aed9a714f0faa40d22dd0f5ab4e42a6a0a76
SHA512 e68ea194e99d7a290a20efe45909e86b885520813910e5aa54bebc1133a7252d5e2564b399721dcb65c74113da87bb45963e871d3b3185e4ac8e3b94c1ece128
SSDEEP 12288:2mdySX5NBrQAZiyEeHcSnGpXLHkTZsfBQE91PDgWhnZ/skeL2PMY:2G5NBrQA3+XLElsfSELDgGnmkjr
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8656

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\suvi\voyapivogizut_kidolofelugefe\hovenadib\24 l.pdb

kernel32

SetFilePointer lstrlenA FindResourceExW MapUserPhysicalPages FreeLibrary InterlockedIncrement GetCommState InterlockedDecrement ZombifyActCtx SetFirmwareEnvironmentVariableA GetSystemWindowsDirectoryW GetNamedPipeHandleStateA GlobalLock GetComputerNameW FreeEnvironmentStringsA GetProcessPriorityBoost GetTickCount GetCommConfig GetConsoleAliasesLengthA GetWindowsDirectoryA GetConsoleAliasExesW WriteFile TlsSetValue GlobalAlloc VirtualFreeEx LoadLibraryW _hread GetCalendarInfoA GetSystemWow64DirectoryW SetSystemTimeAdjustment InitAtomTable GlobalFlags GetComputerNameExA GetBinaryTypeA GetAtomNameW ReadFile GetSystemDirectoryA GetBinaryTypeW ExitThread DeactivateActCtx CreateDirectoryA ReleaseActCtx GetFileSizeEx GetStartupInfoA GetCurrentDirectoryW ReadConsoleOutputCharacterA GetProcAddress GetProcessHeaps VerLanguageNameA CreateNamedPipeA SetStdHandle SetComputerNameA BuildCommDCBW GetLocalTime LoadLibraryA Process32FirstW CreateSemaphoreW SetConsoleCtrlHandler SetCurrentDirectoryW WriteProfileSectionW VirtualLock SetConsoleWindowInfo FindAtomA WriteProfileStringA SetConsoleTitleW VirtualProtect CompareStringA GetFileAttributesExW GetCPInfoExA _lopen GetVolumeNameForVolumeMountPointW DeleteFileW GetCurrentProcessId GetProfileSectionW LCMapStringW CopyFileExA CommConfigDialogW GetModuleHandleA GetLastError WideCharToMultiByte GetCommandLineA HeapValidate IsBadReadPtr RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW GetACP GetOEMCP GetCPInfo IsValidCodePage TlsGetValue GetModuleHandleW TlsAlloc GetCurrentThreadId TlsFree SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection QueryPerformanceCounter GetSystemTimeAsFileTime Sleep ExitProcess GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType HeapDestroy HeapCreate HeapFree VirtualFree HeapAlloc HeapSize HeapReAlloc VirtualAlloc DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW RtlUnwind MultiByteToWideChar LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount FlushFileBuffers WriteConsoleA GetConsoleOutputCP CloseHandle CreateFileA

user32

GetMenuInfo GetListBoxInfo

Sharing

General

Malware Config

Signatures

File Explorer

cbf99c5950929c2aecac3b6244b124c4

kernel32

user32

generic