353f5d14d5ba38f4a568cd4dd469764d8928044f10bfc792bf7b64c9858df8cc

General

Target
353f5d14d5ba38f4a568cd4dd469764d8928044f10bfc792bf7b64c9858df8cc
Size 368KB
Sample240327-bf5ttage82
SHA256 353f5d14d5ba38f4a568cd4dd469764d8928044f10bfc792bf7b64c9858df8cc
MD5 b14fc228393e49a865ade5491070ed77
SHA1 94d63a23ca5847e751246e9079ae8ab23790a474
SHA512 279234fe913fcf7c87cee0fcc8f391cc956cb48fbf9e5ef828cf057b42c43a12938aa2d7aea5aaa718bd9b82fb7031758a6084256c2b246e0008fce8550a028c
SSDEEP 3072:njHTQ0rvDH7Vv8l+uYiXfRHtlljWs3IL/w4m4/jCT/H7TANxYtXoRePtDxuyOYgs:nTTXK/ffNmwzAEtSetD6TE0OFjT
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
353f5d14d5ba38f4a568cd4dd469764d8928044f10bfc792bf7b64c9858df8cc

File Explorer

353f5d14d5ba38f4a568cd4dd469764d8928044f10bfc792bf7b64c9858df8cc

.exe 368KB

353f5d14d5ba38f4a568cd4dd469764d8928044f10bfc792bf7b64c9858df8cc

IMPHASH 5a21299c9e523d932e96c629a301a84f
SHA256 353f5d14d5ba38f4a568cd4dd469764d8928044f10bfc792bf7b64c9858df8cc
MD5 b14fc228393e49a865ade5491070ed77
SHA1 94d63a23ca5847e751246e9079ae8ab23790a474
SHA512 279234fe913fcf7c87cee0fcc8f391cc956cb48fbf9e5ef828cf057b42c43a12938aa2d7aea5aaa718bd9b82fb7031758a6084256c2b246e0008fce8550a028c
SSDEEP 3072:njHTQ0rvDH7Vv8l+uYiXfRHtlljWs3IL/w4m4/jCT/H7TANxYtXoRePtDxuyOYgs:nTTXK/ffNmwzAEtSetD6TE0OFjT
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

16807

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\batowavu hemabavad61-c.pdb

kernel32

InterlockedIncrement SetConsoleTextAttribute ReadConsoleA GetCurrentProcess CreateDirectoryW GetFileAttributesExA GetTickCount GetCommConfig GetConsoleAliasesLengthA GetWindowsDirectoryA GlobalAlloc GetVolumeInformationA GetFirmwareEnvironmentVariableA TerminateThread GetLocaleInfoW GetSystemPowerStatus GetConsoleAliasExesLengthW GetVersionExW FindNextVolumeW GetConsoleAliasW GetModuleFileNameW CreateFileW FindResourceA GetLastError GetCurrentDirectoryW GetProcAddress PeekConsoleInputW RemoveDirectoryA LoadLibraryA WriteConsoleA FindFirstVolumeMountPointW GetNumberFormatW QueryDosDeviceW GlobalFindAtomW VirtualProtect _lopen GetCurrentProcessId ResetWriteWatch AreFileApisANSI OutputDebugStringW HeapReAlloc WriteConsoleW SetStdHandle LCMapStringW GetHandleInformation GetEnvironmentVariableW MultiByteToWideChar EncodePointer DecodePointer ReadFile ExitProcess GetModuleHandleExW WideCharToMultiByte GetCommandLineA RaiseException RtlUnwind IsProcessorFeaturePresent IsValidCodePage GetACP GetOEMCP GetCPInfo SetLastError GetCurrentThreadId EnterCriticalSection LeaveCriticalSection FlushFileBuffers WriteFile GetConsoleCP GetConsoleMode DeleteCriticalSection HeapSize HeapFree IsDebuggerPresent SetFilePointerEx GetStdHandle GetFileType GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW LoadLibraryExW HeapAlloc GetProcessHeap GetModuleFileNameA QueryPerformanceCounter GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW GetStringTypeW CloseHandle

user32

CharUpperBuffW ChangeMenuA CharLowerBuffA DrawAnimatedRects

advapi32

ReadEventLogA

Sharing

General

Malware Config

Signatures

File Explorer

353f5d14d5ba38f4a568cd4dd469764d8928044f10bfc792bf7b64c9858df8cc

kernel32

user32

advapi32

generic