d83a47429ff68f786d2f4392fe7b0af6

General

Target
d83a47429ff68f786d2f4392fe7b0af6
Size 562KB
Sample240320-jaednsbf62
SHA256 acf073ae5f8b4e643367dc746674f1e228ecc8e94e9327a70b176b21a0dda604
MD5 d83a47429ff68f786d2f4392fe7b0af6
SHA1 f3a05ac0996c61a7eafb37015564d7c2451994b5
SHA512 61681286b52ee4b54b94938b018191a282d7ac40adf92d1e30c541c595995c8313c4a21b8172c7e2ed8eae7f3354b3d381c1072587c75cf178b2fecb5d0da8a8
SSDEEP 12288:NJZ0lilpy9EBBD6QzKMVle8NGL+h2kVU+tTmOzaby0Fy4:6lilr2SlX522dKNb384
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d83a47429ff68f786d2f4392fe7b0af6

File Explorer

d83a47429ff68f786d2f4392fe7b0af6

.exe 562KB

d83a47429ff68f786d2f4392fe7b0af6

IMPHASH 15f5af8eb180c685d7e8c475dd6ce4a1
SHA256 acf073ae5f8b4e643367dc746674f1e228ecc8e94e9327a70b176b21a0dda604
MD5 d83a47429ff68f786d2f4392fe7b0af6
SHA1 f3a05ac0996c61a7eafb37015564d7c2451994b5
SHA512 61681286b52ee4b54b94938b018191a282d7ac40adf92d1e30c541c595995c8313c4a21b8172c7e2ed8eae7f3354b3d381c1072587c75cf178b2fecb5d0da8a8
SSDEEP 12288:NJZ0lilpy9EBBD6QzKMVle8NGL+h2kVU+tTmOzaby0Fy4:6lilr2SlX522dKNb384
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

5376

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\fofu.pdb

kernel32

GetCommandLineW GetComputerNameA GetThreadContext EnumResourceNamesW UnregisterWait SetPriorityClass WriteConsoleInputW SetFilePointer lstrlenA GetConsoleAliasesLengthW GetQueuedCompletionStatus InterlockedDecrement WaitNamedPipeA CompareFileTime SetEnvironmentVariableW CreateDirectoryW GlobalLock OpenSemaphoreA FreeEnvironmentStringsA GetTickCount AddRefActCtx LoadLibraryW GetConsoleMode GetSystemWow64DirectoryW IsProcessorFeaturePresent CreateSemaphoreA IsDBCSLeadByte ReadFile GetModuleFileNameW CompareStringW LCMapStringA GetFileSizeEx GetStartupInfoA GetCPInfoExW OpenMutexW GetHandleInformation GetCurrentDirectoryW SetLastError GetProcAddress VirtualAlloc WriteProfileSectionA ReadFileEx CopyFileA GetPrivateProfileStringA ResetEvent LoadLibraryA OpenMutexA GetConsoleScreenBufferInfo LocalAlloc GetExitCodeThread SetCurrentDirectoryW PostQueuedCompletionStatus FindAtomA CreateIoCompletionPort HeapSetInformation GetConsoleCursorInfo FatalAppExitA GetVersionExA TlsAlloc FindAtomW GetSystemTime CopyFileExA GetStartupInfoW HeapValidate IsBadReadPtr RaiseException EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent DeleteCriticalSection QueryPerformanceCounter GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime GetModuleHandleW Sleep InterlockedIncrement ExitProcess FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType TlsGetValue TlsSetValue TlsFree GetLastError HeapDestroy HeapCreate HeapFree VirtualFree GetModuleFileNameA WriteFile HeapAlloc HeapSize HeapReAlloc GetACP GetOEMCP GetCPInfo IsValidCodePage RtlUnwind DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW MultiByteToWideChar InitializeCriticalSectionAndSpinCount WideCharToMultiByte LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers GetConsoleCP CloseHandle SetStdHandle WriteConsoleA GetConsoleOutputCP CreateFileA GetModuleHandleA

Sharing

General

Malware Config

Signatures

File Explorer

d83a47429ff68f786d2f4392fe7b0af6

kernel32

generic