de0dcf4cb9b0992ebbc7bd14e622fcd4

General

Target
de0dcf4cb9b0992ebbc7bd14e622fcd4
Size 538KB
Sample240325-p2v4dsga87
SHA256 2cb6f7d2025433a11bca3f95e0c96b6ff73668d5038cadb8b10850f2dca06355
MD5 de0dcf4cb9b0992ebbc7bd14e622fcd4
SHA1 e9ffa3aaf454fc84350dc251fdc6820a97b4be7d
SHA512 8695a4733e75be2652ccd773969f76a5a2e9e2c1325d3ea2f3f21974c8cfa54d0913fbba6dd39d38e6f856568698a6308cabee7cab76c24f69e39f34d85eb6c2
SSDEEP 12288:4BNiLzWpL3G7ayGuT/ho47t3o/ZFoy2j59aMwRE:xLgGGUT/K2oRFoBj59aMw
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de0dcf4cb9b0992ebbc7bd14e622fcd4

File Explorer

de0dcf4cb9b0992ebbc7bd14e622fcd4

.exe 538KB

de0dcf4cb9b0992ebbc7bd14e622fcd4

IMPHASH 11bc5a96dc8b455509d3ea367d443d49
SHA256 2cb6f7d2025433a11bca3f95e0c96b6ff73668d5038cadb8b10850f2dca06355
MD5 de0dcf4cb9b0992ebbc7bd14e622fcd4
SHA1 e9ffa3aaf454fc84350dc251fdc6820a97b4be7d
SHA512 8695a4733e75be2652ccd773969f76a5a2e9e2c1325d3ea2f3f21974c8cfa54d0913fbba6dd39d38e6f856568698a6308cabee7cab76c24f69e39f34d85eb6c2
SSDEEP 12288:4BNiLzWpL3G7ayGuT/ho47t3o/ZFoy2j59aMwRE:xLgGGUT/K2oRFoBj59aMw
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

349575

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\rofelu\pet\bakiwojepicih\61\rakefuj\zujim.pdb

kernel32

EnterCriticalSection GetConsoleAliasesLengthA CreateActCtxW ReadConsoleInputA InterlockedPopEntrySList SetConsoleDisplayMode CreateConsoleScreenBuffer GetConsoleCP VerifyVersionInfoA CreateFileW WritePrivateProfileSectionW GetPrivateProfileSectionW EnumDateFormatsExA GetCurrentProcessId LoadLibraryA IsDebuggerPresent SetConsoleCP FindFirstVolumeA WriteFile BuildCommDCBW VerLanguageNameA SetFileApisToANSI WriteProcessMemory SetEvent GetExitCodeThread EndUpdateResourceW GetCPInfo GetLastError UpdateResourceA SetConsoleTitleW SetFilePointer LoadLibraryExW CopyFileW ReadConsoleA ActivateActCtx AddRefActCtx HeapLock DnsHostnameToComputerNameA ReadConsoleOutputA GetProcessHeaps GetSystemWindowsDirectoryW GetUserDefaultLCID BuildCommDCBAndTimeoutsA HeapAlloc UnmapViewOfFile GetAtomNameA HeapSize GetGeoInfoW GetCurrentProcess VirtualProtect GetProcAddress GetModuleHandleA CreateThread GetVersionExW SetProcessAffinityMask WaitForSingleObject SetConsoleCursorInfo VerifyVersionInfoW WriteConsoleOutputCharacterW GetFileAttributesExA GetComputerNameW CommConfigDialogW GetConsoleAliasA GetConsoleWindow GetSystemTimeAsFileTime GetDiskFreeSpaceA CloseHandle InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection RaiseException RtlUnwind HeapReAlloc GetCommandLineA GetStartupInfoA UnhandledExceptionFilter SetUnhandledExceptionFilter HeapFree TerminateProcess GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc SetHandleCount GetStdHandle GetFileType ExitProcess GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW GetConsoleMode InitializeCriticalSectionAndSpinCount SetStdHandle LCMapStringA LCMapStringW WriteConsoleA GetConsoleOutputCP WriteConsoleW FlushFileBuffers CreateFileA

user32

GetAltTabInfoA RealChildWindowFromPoint

Sharing

General

Malware Config

Signatures

File Explorer

de0dcf4cb9b0992ebbc7bd14e622fcd4

kernel32

user32

generic