ddeb056ae1107f54f787111be1f88041

General

Target
ddeb056ae1107f54f787111be1f88041
Size 12.1MB
Sample240325-nr6ayaed94
SHA256 0679a918d7d020d9487e309fbcf8e55c997f405530f92256b6de7d3ae27eb0b7
MD5 ddeb056ae1107f54f787111be1f88041
SHA1 e423feb2f9ab5312ccc4a4ab6cee6997f1c86c03
SHA512 d4ddc7fc8df98e218a483b231bf7a57d58a10718381b6d6c4af9a27bd7967874cc2fcba8ef5a8621efcc72e78bc1ca3a4b496ba0db896c9ecc178ac4a9cd0ed6
SSDEEP 24576:Igdy5yNM4444444444444444444444444444444444444444444444444444444v:
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ddeb056ae1107f54f787111be1f88041

File Explorer

ddeb056ae1107f54f787111be1f88041

.exe 12.1MB

ddeb056ae1107f54f787111be1f88041

IMPHASH 1f6beecfd99c1d466bbeeed249a73f82
SHA256 0679a918d7d020d9487e309fbcf8e55c997f405530f92256b6de7d3ae27eb0b7
MD5 ddeb056ae1107f54f787111be1f88041
SHA1 e423feb2f9ab5312ccc4a4ab6cee6997f1c86c03
SHA512 d4ddc7fc8df98e218a483b231bf7a57d58a10718381b6d6c4af9a27bd7967874cc2fcba8ef5a8621efcc72e78bc1ca3a4b496ba0db896c9ecc178ac4a9cd0ed6
SSDEEP 24576:Igdy5yNM4444444444444444444444444444444444444444444444444444444v:
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

5696

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\yetucadima.pdb

kernel32

GetComputerNameA UnregisterWait GetFileSize SetFilePointer lstrlenA GetConsoleAliasesLengthW GetConsoleAliasExesA GetConsoleAliasExesLengthA MapUserPhysicalPages FreeLibrary InterlockedIncrement InterlockedDecrement ZombifyActCtx CompareFileTime GetSystemWindowsDirectoryW GlobalLock VirtualFree GenerateConsoleCtrlEvent SetCommState SetProcessPriorityBoost TlsSetValue FindResourceExA GlobalAlloc LoadLibraryW GetCalendarInfoA GetSystemWow64DirectoryW SetSystemTimeAdjustment InitAtomTable GlobalFlags GetComputerNameExA GetConsoleAliasW SetConsoleCursorPosition GetBinaryTypeA ReadFile CompareStringW VirtualUnlock SetCurrentDirectoryA GetStartupInfoA GetCPInfoExW VerLanguageNameA SetFirmwareEnvironmentVariableW CreateNamedPipeA WriteProfileSectionA SetStdHandle SetComputerNameA VerLanguageNameW GetLocalTime LoadLibraryA CreateSemaphoreW WriteProfileSectionW SetSystemTime Process32NextW CreateIoCompletionPort SetConsoleTitleW FreeEnvironmentStringsW EnumResourceNamesA WriteProfileStringW BuildCommDCBA VirtualProtect GetCurrentDirectoryA GetFileAttributesExW GetConsoleCursorInfo _lopen FindAtomW GetWindowsDirectoryW GetVersion GetVolumeNameForVolumeMountPointW ReadConsoleOutputCharacterW GetProfileSectionW LCMapStringW CopyFileExA AreFileApisANSI CommConfigDialogW DeleteFileA FlushFileBuffers GetCommandLineA HeapValidate IsBadReadPtr RaiseException GetModuleHandleW Sleep GetProcAddress ExitProcess TlsGetValue TlsAlloc GetCurrentThreadId TlsFree SetLastError GetLastError DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetModuleFileNameW SetUnhandledExceptionFilter QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType HeapDestroy HeapCreate HeapFree WriteFile HeapAlloc TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent HeapSize HeapReAlloc VirtualAlloc GetACP GetOEMCP GetCPInfo IsValidCodePage RtlUnwind InitializeCriticalSectionAndSpinCount DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW MultiByteToWideChar LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP GetConsoleMode WriteConsoleA GetConsoleOutputCP CreateFileA CloseHandle

user32

GetMessageTime GetMenuInfo

Sharing

General

Malware Config

Signatures

File Explorer

ddeb056ae1107f54f787111be1f88041

kernel32

user32

generic