faade33cb06d94a573e60ffbb941b525d2e1c093630023bd53278a31c9a84bbf

General

Target
faade33cb06d94a573e60ffbb941b525d2e1c093630023bd53278a31c9a84bbf
Size 377KB
Sample240405-wlc17sae31
SHA256 faade33cb06d94a573e60ffbb941b525d2e1c093630023bd53278a31c9a84bbf
MD5 8fa5cc9d38655cc152eb826e1b5bc913
SHA1 fa1ff7e87c972ff94b27f9be0026a3235048d1b5
SHA512 a065d471cb24a39be09f2a6e384f147e2c8bbd7ef3553f68f2b38cd32d7680eb6715672158ecb42522d7cc30841ed8d07caf454df0e81d58935da0221954067e
SSDEEP 6144:KMSl8andYjkGnrbYOq7z4U0mlUpQ51EFs0sLM2/yy5JQxT/DyP:KTl8YdYI+rb+7z7UpQ570sL9Jq/DyP
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
faade33cb06d94a573e60ffbb941b525d2e1c093630023bd53278a31c9a84bbf

File Explorer

faade33cb06d94a573e60ffbb941b525d2e1c093630023bd53278a31c9a84bbf

.exe 377KB

faade33cb06d94a573e60ffbb941b525d2e1c093630023bd53278a31c9a84bbf

IMPHASH dcf99e8764eb8316e61954e86bb0a268
SHA256 faade33cb06d94a573e60ffbb941b525d2e1c093630023bd53278a31c9a84bbf
MD5 8fa5cc9d38655cc152eb826e1b5bc913
SHA1 fa1ff7e87c972ff94b27f9be0026a3235048d1b5
SHA512 a065d471cb24a39be09f2a6e384f147e2c8bbd7ef3553f68f2b38cd32d7680eb6715672158ecb42522d7cc30841ed8d07caf454df0e81d58935da0221954067e
SSDEEP 6144:KMSl8andYjkGnrbYOq7z4U0mlUpQ51EFs0sLM2/yy5JQxT/DyP:KTl8YdYI+rb+7z7UpQ570sL9Jq/DyP
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

16977

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\xirufeseporoz_veharo\xavaj-l.pdb

kernel32

GetLocaleInfoA GlobalAddAtomA GetCurrentProcess QueryDosDeviceA GetNumberFormatA ReadConsoleW GetVolumeInformationA GlobalFindAtomA LoadLibraryW ReadConsoleInputA GetConsoleAliasExesLengthW LeaveCriticalSection GetConsoleAliasW WriteConsoleW FileTimeToSystemTime GetModuleFileNameW ExitThread GetConsoleOutputCP GetNumaProcessorNode GetCurrentDirectoryW SetLastError GetThreadLocale GetProcAddress InterlockedExchangeAdd LocalAlloc FindFirstVolumeMountPointW VirtualLock GetModuleFileNameA VirtualProtect GetWindowsDirectoryW DeleteTimerQueueTimer MoveFileWithProgressW GetTempPathA FindNextVolumeA SetThreadContext RemoveVectoredExceptionHandler FindResourceA GetLastError GetEnvironmentVariableW SetEndOfFile SetFilePointerEx IsProcessorFeaturePresent EncodePointer DecodePointer ExitProcess GetModuleHandleExW AreFileApisANSI MultiByteToWideChar WideCharToMultiByte GetCommandLineW RaiseException RtlUnwind IsDebuggerPresent HeapFree HeapAlloc HeapSize EnterCriticalSection GetCurrentThreadId CloseHandle DeleteCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetModuleHandleW GetStdHandle WriteFile LoadLibraryExW IsValidCodePage GetACP GetOEMCP GetCPInfo GetProcessHeap GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW HeapReAlloc LCMapStringW SetStdHandle FlushFileBuffers GetConsoleCP GetConsoleMode OutputDebugStringW GetStringTypeW CreateFileW ReadFile

gdi32

SetTextJustification SelectPalette

advapi32

RegisterEventSourceW

ole32

CoGetClassObject

Sharing

General

Malware Config

Signatures

File Explorer

faade33cb06d94a573e60ffbb941b525d2e1c093630023bd53278a31c9a84bbf

kernel32

gdi32

advapi32

ole32

generic