dd301934a4e285bc341cf0db4ca5ab39

General

Target
dd301934a4e285bc341cf0db4ca5ab39
Size 422KB
Sample240325-encpsaae5y
SHA256 75e78a31b0f86294e14d4bfe00488022e0d42e1de226f381baf2f663463eecb4
MD5 dd301934a4e285bc341cf0db4ca5ab39
SHA1 579440ca7fc6c68168adec2165ef66606622cde5
SHA512 c26d344f2a02400617af3d88d51171539c21e176a93610f8286351936ade1698d7a0dde0c88ae99ea8b0d63e46ab8809e2fae87cfad6ffb435bd2d1a5ec8bdcd
SSDEEP 6144:gc5RnL2w8tF8pY5328Zs0lm5xS3uPNxNy3U4bPCSL1W7kzrRQOKsScnMhdURYax3:g6QwYFmYx28/IvSVULUPzraV/axalc
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd301934a4e285bc341cf0db4ca5ab39

File Explorer

dd301934a4e285bc341cf0db4ca5ab39

.exe 422KB

dd301934a4e285bc341cf0db4ca5ab39

IMPHASH 20ff7324133601fe5173a4e9ba32551a
SHA256 75e78a31b0f86294e14d4bfe00488022e0d42e1de226f381baf2f663463eecb4
MD5 dd301934a4e285bc341cf0db4ca5ab39
SHA1 579440ca7fc6c68168adec2165ef66606622cde5
SHA512 c26d344f2a02400617af3d88d51171539c21e176a93610f8286351936ade1698d7a0dde0c88ae99ea8b0d63e46ab8809e2fae87cfad6ffb435bd2d1a5ec8bdcd
SSDEEP 6144:gc5RnL2w8tF8pY5328Zs0lm5xS3uPNxNy3U4bPCSL1W7kzrRQOKsScnMhdURYax3:g6QwYFmYx28/IvSVULUPzraV/axalc
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

10723

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\yugimix\wopucegomup\guge\teca-wilanicupu.pdb

kernel32

lstrlenA GetCPInfo GetDefaultCommConfigW HeapAlloc _lwrite InterlockedDecrement GetCurrentProcess GetSystemWindowsDirectoryW GetUserDefaultLCID SetConsoleScreenBufferSize SetVolumeMountPointW GetCommandLineA GetEnvironmentStrings ReadConsoleInputA WriteConsoleOutputA GetVersionExW GetComputerNameExA lstrcpynW GetFileAttributesW LocalReAlloc HeapQueryInformation GetModuleFileNameW GetCPInfoExW ChangeTimerQueueTimer GetProcAddress AttachConsole PeekConsoleInputW VerLanguageNameA FreeUserPhysicalPages GetLocalTime LoadLibraryA BeginUpdateResourceA GetCurrentConsoleFont SetEnvironmentVariableA GetConsoleTitleW BuildCommDCBA VirtualProtect FindFirstVolumeA ReleaseMutex GetVersion AddConsoleAliasA EnumCalendarInfoExA LCMapStringW CreateThread CreateFileA SetStdHandle CreateTimerQueue ReadFile GetSystemDefaultLangID WriteConsoleW GetConsoleOutputCP InterlockedIncrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree TerminateProcess IsDebuggerPresent GetModuleHandleW ExitProcess GetStartupInfoA RtlUnwind RaiseException LCMapStringA WideCharToMultiByte MultiByteToWideChar WriteFile GetStdHandle GetModuleFileNameA HeapCreate VirtualFree VirtualAlloc HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA GetStringTypeW GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA

user32

RealGetWindowClassA GetCaretPos

Sharing

General

Malware Config

Signatures

File Explorer

dd301934a4e285bc341cf0db4ca5ab39

kernel32

user32

generic