df709113fd89d4d98279d4b7886211c3

General

Target
df709113fd89d4d98279d4b7886211c3
Size 1.2MB
Sample240326-sb6c8acf75
SHA256 2c5b6da56b0a1822972f1817b41e6fb888790c907f2dfd67c8a64928874ceb2d
MD5 df709113fd89d4d98279d4b7886211c3
SHA1 d1cd48fab61e736406ed04c18d68f170edc1f092
SHA512 0568870112a2f307f286ca902ac4d40dc5cde7e46214adff1a561276d389c5322aedcdc8d2cb105d8b9e3b0bd412e224847047af718c1d3f33f3808da727198c
SSDEEP 24576:w/5vt2gQxHUWxk2Q0vdEN7s2sW3HOw2qYOP13uQuecphAcXa:w/DQ6ySN7sHw26P13uEydq
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df709113fd89d4d98279d4b7886211c3

File Explorer

df709113fd89d4d98279d4b7886211c3

.exe 1.2MB

df709113fd89d4d98279d4b7886211c3

IMPHASH 2e72f2402159f3418273773a579521e9
SHA256 2c5b6da56b0a1822972f1817b41e6fb888790c907f2dfd67c8a64928874ceb2d
MD5 df709113fd89d4d98279d4b7886211c3
SHA1 d1cd48fab61e736406ed04c18d68f170edc1f092
SHA512 0568870112a2f307f286ca902ac4d40dc5cde7e46214adff1a561276d389c5322aedcdc8d2cb105d8b9e3b0bd412e224847047af718c1d3f33f3808da727198c
SSDEEP 24576:w/5vt2gQxHUWxk2Q0vdEN7s2sW3HOw2qYOP13uQuecphAcXa:w/DQ6ySN7sHw26P13uEydq
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

9568

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\dekarah61_liho_wuzi77_judobedoh.pdb

kernel32

GetVolumeNameForVolumeMountPointA GetComputerNameA GetNativeSystemInfo SetFilePointer lstrlenA GetConsoleAliasesLengthW CopyFileExW GetConsoleAliasExesA GetConsoleAliasExesLengthA MapUserPhysicalPages FreeLibrary InterlockedIncrement InterlockedDecrement ZombifyActCtx GlobalLock GetProfileSectionA SetComputerNameW GetFileAttributesExA FreeEnvironmentStringsA GetProcessPriorityBoost GetTickCount GetCommConfig LocalFlags GetConsoleAliasesLengthA GetWindowsDirectoryA SetCommState TlsSetValue GetEnvironmentStrings FindResourceExA GlobalAlloc LoadLibraryW _hread GetCalendarInfoW GetSystemWow64DirectoryW GetSystemWindowsDirectoryA GetSystemTimeAdjustment InitAtomTable GetComputerNameExA GetBinaryTypeA GetAtomNameW ReadFile CompareStringW SetConsoleTitleA VirtualUnlock LCMapStringA ReleaseActCtx GetFileSizeEx SetCurrentDirectoryA GetStartupInfoA GetCPInfoExW GetCurrentDirectoryW GetProcAddress VerLanguageNameA SetFirmwareEnvironmentVariableW CreateNamedPipeA SetStdHandle BuildCommDCBW GetLocalTime LoadLibraryA CreateSemaphoreW SetConsoleCtrlHandler WriteProfileSectionW Process32NextW WriteProfileStringA EnumResourceNamesA VirtualProtect _lopen FindAtomW DeleteFileW UnregisterWaitEx ReadConsoleOutputCharacterW AreFileApisANSI CommConfigDialogW GetLastError WideCharToMultiByte GetCommandLineA HeapValidate IsBadReadPtr RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW GetACP GetOEMCP GetCPInfo IsValidCodePage TlsGetValue GetModuleHandleW TlsAlloc GetCurrentThreadId TlsFree SetLastError LeaveCriticalSection EnterCriticalSection GetFileType WriteFile GetConsoleCP GetConsoleMode DeleteCriticalSection SetHandleCount GetStdHandle QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime Sleep ExitProcess GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW HeapDestroy HeapCreate HeapFree VirtualFree HeapAlloc HeapSize HeapReAlloc VirtualAlloc DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW RtlUnwind MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP CreateFileA CloseHandle FlushFileBuffers GetModuleHandleA

user32

GetMessageTime GetMenuInfo

Name

.text

Size

165KB

Virtual Size

164KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

52KB

Virtual Size

52KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

944KB

Virtual Size

1.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

193B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

25KB

Virtual Size

25KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

18KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

df709113fd89d4d98279d4b7886211c3

kernel32

user32

generic