dc7fa5e9590a5655e2599a34ebe7418f

General

Target
dc7fa5e9590a5655e2599a34ebe7418f
Size 527KB
Sample240321-ysjtfagh77
SHA256 a228971bef4b94f2319bda9171a810d555238208893c3609d3291e24591922fb
MD5 dc7fa5e9590a5655e2599a34ebe7418f
SHA1 5315cc45343f942cf8a7d9009eb9eed9a3cf25d9
SHA512 ec602628faaefe5d0387249ac2521415ee1eb070d84ebda8b93e5598725032e12847349333f16abdfd9a09c4760809e3c01877604a305c31c1054d7f488f6fdb
SSDEEP 12288:uz+ImOoPNL6oQCktuSglKcftk10P3st2YUf7hZL:uqDwzXglKCaA3uyf7n
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc7fa5e9590a5655e2599a34ebe7418f

File Explorer

dc7fa5e9590a5655e2599a34ebe7418f

.exe 527KB

dc7fa5e9590a5655e2599a34ebe7418f

IMPHASH a84fa8c5c9d81b30cf439f0d2b7f422b
SHA256 a228971bef4b94f2319bda9171a810d555238208893c3609d3291e24591922fb
MD5 dc7fa5e9590a5655e2599a34ebe7418f
SHA1 5315cc45343f942cf8a7d9009eb9eed9a3cf25d9
SHA512 ec602628faaefe5d0387249ac2521415ee1eb070d84ebda8b93e5598725032e12847349333f16abdfd9a09c4760809e3c01877604a305c31c1054d7f488f6fdb
SSDEEP 12288:uz+ImOoPNL6oQCktuSglKcftk10P3st2YUf7hZL:uqDwzXglKCaA3uyf7n
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

10155

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\ceke 58\ricivinizenak\wijibodasiyudo\zage\payogotab\lijuw8.pdb

kernel32

GetConsoleAliasesLengthW WriteConsoleOutputCharacterA WriteConsoleOutputW EndUpdateResourceW InterlockedIncrement GetConsoleAliasA InterlockedDecrement GetCurrentProcess GetSystemWindowsDirectoryW SetEnvironmentVariableW WaitForSingleObject GetSystemDefaultLCID GetModuleHandleW EnumCalendarInfoExW SetThreadUILanguage GetConsoleTitleA GetEnvironmentStrings GetConsoleCP GetSystemDirectoryW ReadConsoleInputA SetVolumeMountPointA GetVersionExW lstrcpynW SetConsoleCursorPosition GetFileAttributesW SetTimeZoneInformation WriteConsoleW IsBadWritePtr GetMailslotInfo GetModuleFileNameW CreateActCtxA lstrcatA lstrlenW FlushFileBuffers VerifyVersionInfoW InterlockedExchange FillConsoleOutputCharacterW ChangeTimerQueueTimer SetLastError GetProcAddress PeekConsoleInputW EnumDateFormatsExA CreateTimerQueueTimer LocalLock EnterCriticalSection GlobalGetAtomNameA ResetEvent GetLocalTime LocalAlloc DnsHostnameToComputerNameA SetConsoleOutputCP SetFileApisToANSI BeginUpdateResourceA GetOEMCP GetModuleHandleA HeapSetInformation GetCPInfoExA FindFirstVolumeA DeleteTimerQueueTimer GetCurrentProcessId GetConsoleProcessList LCMapStringW LCMapStringA UnhandledExceptionFilter SetUnhandledExceptionFilter HeapAlloc Sleep ExitProcess GetCommandLineA GetStartupInfoA RaiseException RtlUnwind GetLastError WriteFile GetStdHandle GetModuleFileNameA TerminateProcess IsDebuggerPresent HeapFree DeleteCriticalSection LeaveCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId LoadLibraryA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetCPInfo GetACP IsValidCodePage HeapSize GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW

user32

RealGetWindowClassA

Sharing

General

Malware Config

Signatures

File Explorer

dc7fa5e9590a5655e2599a34ebe7418f

kernel32

user32

generic