5c6d04fd179290b9951d8a710648de2d8c25b3a1b8dd726325ff8b1aac74fb45

General

Target
5c6d04fd179290b9951d8a710648de2d8c25b3a1b8dd726325ff8b1aac74fb45
Size 765KB
Sample240330-ldtc4sda99
SHA256 5c6d04fd179290b9951d8a710648de2d8c25b3a1b8dd726325ff8b1aac74fb45
MD5 d82aa3929b4b10d70040d9962f52973b
SHA1 5de4139ea3987fd683ed347f9b9cb649cb6318ce
SHA512 898193deb4ac80482ab4f4e6397757aec6d3a19fb121e45d4e9573e57615441092a89ad4d4c2fec62894e0b10654349b9977bb5a3d4efa3de20b43f9a72ddc9f
SSDEEP 12288:StNbGV543/Un6izjgEaXj0EffGlu9n2y9a7yyf33Fq4wZ:2KVGvLizjgbz9n2lWyfnFqH
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c6d04fd179290b9951d8a710648de2d8c25b3a1b8dd726325ff8b1aac74fb45

File Explorer

5c6d04fd179290b9951d8a710648de2d8c25b3a1b8dd726325ff8b1aac74fb45

.exe 765KB

5c6d04fd179290b9951d8a710648de2d8c25b3a1b8dd726325ff8b1aac74fb45

IMPHASH 624073eb8eb5db9d6388daa3da73856e
SHA256 5c6d04fd179290b9951d8a710648de2d8c25b3a1b8dd726325ff8b1aac74fb45
MD5 d82aa3929b4b10d70040d9962f52973b
SHA1 5de4139ea3987fd683ed347f9b9cb649cb6318ce
SHA512 898193deb4ac80482ab4f4e6397757aec6d3a19fb121e45d4e9573e57615441092a89ad4d4c2fec62894e0b10654349b9977bb5a3d4efa3de20b43f9a72ddc9f
SSDEEP 12288:StNbGV543/Un6izjgEaXj0EffGlu9n2y9a7yyf33Fq4wZ:2KVGvLizjgbz9n2lWyfnFqH
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

14587

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\newinedonije\pavo48\tinagukur\bahopewe\dilujav\fazut-mepoticanifo.pdb

kernel32

SetHandleInformation _lcreat GetTickCount GetConsoleAliasesLengthA GlobalAlloc GlobalFindAtomA SetCommConfig GetLocaleInfoW ReadConsoleInputA GetSystemPowerStatus GetConsoleAliasExesLengthW GetVersionExW FindNextVolumeW GetConsoleAliasW GetWriteWatch WriteConsoleW CreateFileW GetEnvironmentVariableA ExitThread GetLastError ChangeTimerQueueTimer ReadConsoleA LoadLibraryA FindFirstVolumeMountPointW SetConsoleCtrlHandler GetNumberFormatW RemoveDirectoryW SetFileApisToANSI QueryDosDeviceW GetModuleFileNameA VirtualProtect GetCurrentDirectoryA CompareStringA PeekConsoleInputA GetWindowsDirectoryW GetTempPathA WriteProcessMemory GetVolumeInformationW GetStringTypeW OutputDebugStringW FlushFileBuffers FindResourceW InterlockedIncrement GetProcAddress GetLocaleInfoA IsProcessorFeaturePresent EncodePointer DecodePointer ReadFile GetCommandLineA RaiseException RtlUnwind ExitProcess GetModuleHandleExW MultiByteToWideChar WideCharToMultiByte IsDebuggerPresent HeapSize HeapFree EnterCriticalSection LeaveCriticalSection SetFilePointerEx GetConsoleMode GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW SetLastError GetCurrentThreadId HeapAlloc GetProcessHeap WriteFile GetModuleFileNameW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW LoadLibraryExW IsValidCodePage GetACP GetOEMCP GetCPInfo HeapReAlloc LCMapStringW SetStdHandle GetConsoleCP CloseHandle

user32

CharUpperBuffA DrawCaption

gdi32

SetTextColor

advapi32

ReadEventLogW

Sharing

General

Malware Config

Signatures

File Explorer

5c6d04fd179290b9951d8a710648de2d8c25b3a1b8dd726325ff8b1aac74fb45

kernel32

user32

gdi32

advapi32

generic