deb0c884cd5bdf35238e063bc643c2e5

General

Target
deb0c884cd5bdf35238e063bc643c2e5
Size 11.7MB
Sample240325-xbt3eafe92
SHA256 69124d1b3d101c9199c4d39f766ac185a8a0bd2f191b1295fb2d5780a3b0f38b
MD5 deb0c884cd5bdf35238e063bc643c2e5
SHA1 79a9bb56636321130ad4a6e031026521a645e195
SHA512 730ac2567491cb39d321a34cabb93db0cabb9bf1f55563facd4092375d3f95fe823540301ec95ba7f6c07cae355fb6062cf8567863b0b28cbfe7af0c510e530b
SSDEEP 49152:m88888888888888888888888888888888888888888888888888888888888888f:
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
deb0c884cd5bdf35238e063bc643c2e5

File Explorer

deb0c884cd5bdf35238e063bc643c2e5

.exe 11.7MB

deb0c884cd5bdf35238e063bc643c2e5

IMPHASH d3833f70f4683df10bc38b6f940f49e2
SHA256 69124d1b3d101c9199c4d39f766ac185a8a0bd2f191b1295fb2d5780a3b0f38b
MD5 deb0c884cd5bdf35238e063bc643c2e5
SHA1 79a9bb56636321130ad4a6e031026521a645e195
SHA512 730ac2567491cb39d321a34cabb93db0cabb9bf1f55563facd4092375d3f95fe823540301ec95ba7f6c07cae355fb6062cf8567863b0b28cbfe7af0c510e530b
SSDEEP 49152:m88888888888888888888888888888888888888888888888888888888888888f:
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

31393

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\dova\beyegu.pdb

kernel32

GetComputerNameA CreateFileA SetCriticalSectionSpinCount WriteConsoleInputW WriteConsoleOutputCharacterW lstrlenA GetConsoleAliasesLengthW BuildCommDCBAndTimeoutsA UpdateResourceA EndUpdateResourceW ReadConsoleA GetCurrentProcess ZombifyActCtx WritePrivateProfileSectionA InitializeSListHead GetSystemWindowsDirectoryW GetUserDefaultLCID WaitForSingleObject SetEvent GetSystemDefaultLCID GetFileAttributesExA GetModuleHandleW VirtualFree ReadConsoleOutputA CreateActCtxW GetConsoleCP LoadLibraryW ReadConsoleInputA CopyFileW SetConsoleCP LeaveCriticalSection GetConsoleAliasW SetConsoleCursorPosition GetGeoInfoA ReadFile CreateActCtxA GetConsoleOutputCP VerifyVersionInfoW SetLastError GetProcAddress VerLanguageNameA EnumDateFormatsExA HeapUnlock GetConsoleDisplayMode BuildCommDCBW WriteConsoleA InterlockedExchangeAdd DeleteTimerQueue DnsHostnameToComputerNameA SetConsoleDisplayMode GetExitCodeThread SetFileApisToANSI GetDiskFreeSpaceA GlobalFindAtomW SetConsoleTitleW LoadLibraryExA EraseTape GetProcessAffinityMask VirtualProtect GetFileTime GetCPInfoExA FindFirstVolumeA GetVersionExA GetPrivateProfileSectionW GetSystemTime CreateThread CloseHandle InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree TerminateProcess IsDebuggerPresent HeapReAlloc HeapAlloc GetStartupInfoW RtlUnwind RaiseException LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetCPInfo ExitProcess WriteFile GetStdHandle GetModuleFileNameA HeapCreate VirtualAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId SetHandleCount GetFileType GetStartupInfoA SetFilePointer GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetACP GetOEMCP IsValidCodePage GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeA GetStringTypeW LoadLibraryA InitializeCriticalSectionAndSpinCount SetStdHandle GetConsoleMode FlushFileBuffers GetLocaleInfoW WriteConsoleW

user32

GetAltTabInfoW RealChildWindowFromPoint

Sharing

General

Malware Config

Signatures

File Explorer

deb0c884cd5bdf35238e063bc643c2e5

kernel32

user32

generic