f2bc91641d8c2e71bb591147ffa6d52ffe83de6fefee344bb53f603785c9a010

Sharing

Copy URL Twitter E-mail

General

Target
f2bc91641d8c2e71bb591147ffa6d52ffe83de6fefee344bb53f603785c9a010
Size 299KB
Sample240422-gsbdmagg2s
SHA256 f2bc91641d8c2e71bb591147ffa6d52ffe83de6fefee344bb53f603785c9a010
MD5 f9769d561a0edc190a71205dbb375fa5
SHA1 77118f9fd6ea57c98f10e541bc634a635027d47e
SHA512 745ff22f5391fd771039103e1ed9c6fcebdf052ca166a1b361369b010be289f9edc0e731b06a4ecb3bc2611e0ebdee5516eea062f2f79c8069d427c8c811f785
SSDEEP 3072:u4K3l3FgI0vE6d+2rbufS8sO23njSJanqebDEuoAN5O0yozsAFKZ:uLCEuNSmS4bDETS55yozsAFK
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f2bc91641d8c2e71bb591147ffa6d52ffe83de6fefee344bb53f603785c9a010

File Explorer

f2bc91641d8c2e71bb591147ffa6d52ffe83de6fefee344bb53f603785c9a010

.exe 299KB

f2bc91641d8c2e71bb591147ffa6d52ffe83de6fefee344bb53f603785c9a010

IMPHASH deee2f3ec985195fc99175dfed532c7c
SHA256 f2bc91641d8c2e71bb591147ffa6d52ffe83de6fefee344bb53f603785c9a010
MD5 f9769d561a0edc190a71205dbb375fa5
SHA1 77118f9fd6ea57c98f10e541bc634a635027d47e
SHA512 745ff22f5391fd771039103e1ed9c6fcebdf052ca166a1b361369b010be289f9edc0e731b06a4ecb3bc2611e0ebdee5516eea062f2f79c8069d427c8c811f785
SSDEEP 3072:u4K3l3FgI0vE6d+2rbufS8sO23njSJanqebDEuoAN5O0yozsAFKZ:uLCEuNSmS4bDETS55yozsAFK
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

15735

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\riwon\bep\rese\vagixu\boweg\woyunaxupajox\77\yatihiguhono-lug.pdb

kernel32

LocalCompact GetUserDefaultLCID AddConsoleAliasW CreateHardLinkA GetTickCount GetWindowsDirectoryA EnumTimeFormatsW FindResourceExA GetVolumeInformationA LoadLibraryW ReadConsoleInputA CopyFileW WriteConsoleW GetCompressedFileSizeA GetTempPathW SetThreadLocale GetLastError SetLastError GetProcAddress GetLocaleInfoA CreateTimerQueueTimer SetStdHandle SetFileAttributesA WriteConsoleA InterlockedExchangeAdd LocalAlloc SetCalendarInfoW GetExitCodeThread RemoveDirectoryW AddAtomA GlobalFindAtomW GetModuleFileNameA GetOEMCP GlobalUnWire LoadLibraryExA AddConsoleAliasA OutputDebugStringW GetComputerNameA FindFirstChangeNotificationW GetSystemDefaultLangID FlushFileBuffers GetConsoleMode HeapFree EncodePointer DecodePointer IsProcessorFeaturePresent GetCommandLineA RaiseException RtlUnwind IsValidCodePage GetACP GetCPInfo GetCurrentThreadId IsDebuggerPresent GetProcessHeap ExitProcess GetModuleHandleExW MultiByteToWideChar WideCharToMultiByte HeapSize EnterCriticalSection LeaveCriticalSection GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW CloseHandle HeapAlloc WriteFile GetModuleFileNameW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW GetStringTypeW LoadLibraryExW HeapReAlloc ReadFile SetFilePointerEx LCMapStringW GetConsoleCP CreateFileW

user32

GetMenuItemID

gdi32

GetCharacterPlacementW

advapi32

DeregisterEventSource

winhttp

WinHttpConnect

Sharing

General

Malware Config

Signatures

File Explorer

f2bc91641d8c2e71bb591147ffa6d52ffe83de6fefee344bb53f603785c9a010

kernel32

user32

gdi32

advapi32

winhttp

generic