ce18832e3bf13da6c429e205a9a6258b

General

Target
ce18832e3bf13da6c429e205a9a6258b
Size 309KB
Sample240316-pyt2xsbc4w
SHA256 bbfb581e3a80901fe4898887bed82764aa4457c16e1bd01f82c8d954674b7da1
MD5 ce18832e3bf13da6c429e205a9a6258b
SHA1 e7ebeb6e91bdb4534556d41834e73425894868c2
SHA512 dafc954685ea5a89e26a1e54f09505e9de1af67308f85e2bc44ab401d7efc7cb6322f0bd898a9b68456e6853416f814c025087f40a02f0367ec10f954037aecf
SSDEEP 6144:7nexFR1d/27x9nj5mPgfwah8jO5fud6WzjUX8QV/ke0c:mb1R27x9njSgfwg8jWpW/UX8Qme0
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ce18832e3bf13da6c429e205a9a6258b

File Explorer

ce18832e3bf13da6c429e205a9a6258b

.exe 309KB

ce18832e3bf13da6c429e205a9a6258b

IMPHASH 4f8209c5b4ed49d19335a3290f6cce63
SHA256 bbfb581e3a80901fe4898887bed82764aa4457c16e1bd01f82c8d954674b7da1
MD5 ce18832e3bf13da6c429e205a9a6258b
SHA1 e7ebeb6e91bdb4534556d41834e73425894868c2
SHA512 dafc954685ea5a89e26a1e54f09505e9de1af67308f85e2bc44ab401d7efc7cb6322f0bd898a9b68456e6853416f814c025087f40a02f0367ec10f954037aecf
SSDEEP 6144:7nexFR1d/27x9nj5mPgfwah8jO5fud6WzjUX8QV/ke0c:mb1R27x9njSgfwg8jWpW/UX8Qme0
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

12032

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\zeca100\lixuhaxafi\lehonoj31 low-nosegagohe.pdb

kernel32

FileTimeToDosDateTime GetNativeSystemInfo lstrlenA CopyFileExW GetStringTypeA InterlockedIncrement ReadConsoleA InterlockedDecrement CompareFileTime GlobalLock FreeEnvironmentStringsA GetModuleHandleW GetCurrentThread WriteFile SetCommState GetCommandLineA GlobalAlloc GetPrivateProfileIntA LoadLibraryW CopyFileW GetSystemWindowsDirectoryA GetConsoleAliasExesLengthW GetVersionExW GlobalFlags GetExitCodeProcess IsDBCSLeadByte ReadFile SetThreadPriority GetNamedPipeHandleStateW LCMapStringA GetPrivateProfileIntW CreateDirectoryA GetStartupInfoA SetThreadLocale GetLastError GetProcAddress GetPrivateProfileStringA OpenWaitableTimerA LoadLibraryA GetFileType SetCurrentDirectoryW SetThreadIdealProcessor HeapWalk FindAtomA Process32NextW CreateIoCompletionPort QueryMemoryResourceNotification EnumResourceNamesA GetCPInfoExA TlsAlloc ReadConsoleOutputCharacterW GetSystemTime DeleteFileA Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection MultiByteToWideChar GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter GetModuleFileNameW HeapValidate IsBadReadPtr RaiseException RtlUnwind TerminateProcess GetCurrentProcess IsDebuggerPresent GetACP GetOEMCP GetCPInfo IsValidCodePage TlsGetValue TlsSetValue GetCurrentThreadId TlsFree SetLastError QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime ExitProcess FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetStdHandle HeapDestroy HeapCreate HeapFree VirtualFree GetModuleFileNameA FlushFileBuffers WideCharToMultiByte GetConsoleCP GetConsoleMode DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW HeapAlloc HeapSize HeapReAlloc VirtualAlloc InitializeCriticalSectionAndSpinCount LCMapStringW GetStringTypeW GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP SetFilePointer CloseHandle CreateFileA GetModuleHandleA

user32

GetComboBoxInfo

msimg32

TransparentBlt

Sharing

General

Malware Config

Signatures

File Explorer

ce18832e3bf13da6c429e205a9a6258b

kernel32

user32

msimg32

generic