daad6bbfc12991b5f327755123cb4b48

General

Target
daad6bbfc12991b5f327755123cb4b48
Size 11.7MB
Sample240321-eyshzsbf85
SHA256 ca42af334909a2296e1a3ef8707988abba34633858c1b5613b3d6354e66eb0db
MD5 daad6bbfc12991b5f327755123cb4b48
SHA1 da32a326b2a616b1ead71b2b804ac5c2af70aa81
SHA512 1a197f619d8fbc8ce21f93400fbed79e9f50d37751e734c7fd1d52d7d1005307b384ff3ff6f92c933953c393adf1a490b5c103fe128c717f0b213efe0b50c5c2
SSDEEP 24576:+gdy5yNM4444444444444444444444444444444444444444444444444444444s:
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
daad6bbfc12991b5f327755123cb4b48

File Explorer

daad6bbfc12991b5f327755123cb4b48

.exe 11.7MB

daad6bbfc12991b5f327755123cb4b48

IMPHASH 1f6beecfd99c1d466bbeeed249a73f82
SHA256 ca42af334909a2296e1a3ef8707988abba34633858c1b5613b3d6354e66eb0db
MD5 daad6bbfc12991b5f327755123cb4b48
SHA1 da32a326b2a616b1ead71b2b804ac5c2af70aa81
SHA512 1a197f619d8fbc8ce21f93400fbed79e9f50d37751e734c7fd1d52d7d1005307b384ff3ff6f92c933953c393adf1a490b5c103fe128c717f0b213efe0b50c5c2
SSDEEP 24576:+gdy5yNM4444444444444444444444444444444444444444444444444444444s:
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

5696

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\yetucadima.pdb

kernel32

GetComputerNameA UnregisterWait GetFileSize SetFilePointer lstrlenA GetConsoleAliasesLengthW GetConsoleAliasExesA GetConsoleAliasExesLengthA MapUserPhysicalPages FreeLibrary InterlockedIncrement InterlockedDecrement ZombifyActCtx CompareFileTime GetSystemWindowsDirectoryW GlobalLock VirtualFree GenerateConsoleCtrlEvent SetCommState SetProcessPriorityBoost TlsSetValue FindResourceExA GlobalAlloc LoadLibraryW GetCalendarInfoA GetSystemWow64DirectoryW SetSystemTimeAdjustment InitAtomTable GlobalFlags GetComputerNameExA GetConsoleAliasW SetConsoleCursorPosition GetBinaryTypeA ReadFile CompareStringW VirtualUnlock SetCurrentDirectoryA GetStartupInfoA GetCPInfoExW VerLanguageNameA SetFirmwareEnvironmentVariableW CreateNamedPipeA WriteProfileSectionA SetStdHandle SetComputerNameA VerLanguageNameW GetLocalTime LoadLibraryA CreateSemaphoreW WriteProfileSectionW SetSystemTime Process32NextW CreateIoCompletionPort SetConsoleTitleW FreeEnvironmentStringsW EnumResourceNamesA WriteProfileStringW BuildCommDCBA VirtualProtect GetCurrentDirectoryA GetFileAttributesExW GetConsoleCursorInfo _lopen FindAtomW GetWindowsDirectoryW GetVersion GetVolumeNameForVolumeMountPointW ReadConsoleOutputCharacterW GetProfileSectionW LCMapStringW CopyFileExA AreFileApisANSI CommConfigDialogW DeleteFileA FlushFileBuffers GetCommandLineA HeapValidate IsBadReadPtr RaiseException GetModuleHandleW Sleep GetProcAddress ExitProcess TlsGetValue TlsAlloc GetCurrentThreadId TlsFree SetLastError GetLastError DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetModuleFileNameW SetUnhandledExceptionFilter QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType HeapDestroy HeapCreate HeapFree WriteFile HeapAlloc TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent HeapSize HeapReAlloc VirtualAlloc GetACP GetOEMCP GetCPInfo IsValidCodePage RtlUnwind InitializeCriticalSectionAndSpinCount DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW MultiByteToWideChar LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP GetConsoleMode WriteConsoleA GetConsoleOutputCP CreateFileA CloseHandle

user32

GetMessageTime GetMenuInfo

Sharing

General

Malware Config

Signatures

File Explorer

daad6bbfc12991b5f327755123cb4b48

kernel32

user32

generic