12beb2655f1cc39c31fb53bc72670deef2f6311e0f5c2b22fbc85a4ad3cab306

General

Target
12beb2655f1cc39c31fb53bc72670deef2f6311e0f5c2b22fbc85a4ad3cab306
Size 405KB
Sample240425-18dcpsfh4y
SHA256 12beb2655f1cc39c31fb53bc72670deef2f6311e0f5c2b22fbc85a4ad3cab306
MD5 33b1abd3cc664e77be3798f9648c2f1a
SHA1 ef0e1f6edf5127b9f936359881752c3a3cb1c2b7
SHA512 f64087e9fa7fccf5dbdc94c826dc3f20b7242acec3e647c6b2bef7727136154ea2bbebdd5a14e717a1e85926a1fad4ad50623927a4a93e0a467ce4fff2940d49
SSDEEP 6144:6lvgNss1kOj6Ljn7bgDKzgH3SYfmwdG2mFdEL4tOJDsE:6lvgmaeH4KzgXxfFGDdELuOJDsE
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12beb2655f1cc39c31fb53bc72670deef2f6311e0f5c2b22fbc85a4ad3cab306

File Explorer

12beb2655f1cc39c31fb53bc72670deef2f6311e0f5c2b22fbc85a4ad3cab306

.exe 405KB

12beb2655f1cc39c31fb53bc72670deef2f6311e0f5c2b22fbc85a4ad3cab306

IMPHASH 7dd08063ba15d7295e29dcfabb5e9889
SHA256 12beb2655f1cc39c31fb53bc72670deef2f6311e0f5c2b22fbc85a4ad3cab306
MD5 33b1abd3cc664e77be3798f9648c2f1a
SHA1 ef0e1f6edf5127b9f936359881752c3a3cb1c2b7
SHA512 f64087e9fa7fccf5dbdc94c826dc3f20b7242acec3e647c6b2bef7727136154ea2bbebdd5a14e717a1e85926a1fad4ad50623927a4a93e0a467ce4fff2940d49
SSDEEP 6144:6lvgNss1kOj6Ljn7bgDKzgH3SYfmwdG2mFdEL4tOJDsE:6lvgmaeH4KzgXxfFGDdELuOJDsE
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

16748

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\bugedijifa\rirajagevutu-gakedas_20\hozedeh\nuwazadolah.pdb

kernel32

GetSystemDefaultLangID GlobalMemoryStatus GetLocaleInfoA FindResourceExW LocalCompact InterlockedDecrement GetComputerNameW CreateHardLinkA BackupSeek GetTickCount GetConsoleAliasesA GetWindowsDirectoryA EnumTimeFormatsW GetUserDefaultLangID SetCommState GlobalAlloc LoadLibraryW ReadConsoleInputA WriteConsoleW GetModuleFileNameW MultiByteToWideChar GetLastError ChangeTimerQueueTimer SetLastError GetThreadLocale GetProcAddress RemoveDirectoryA SetFileAttributesA BuildCommDCBW LoadLibraryA GetExitCodeThread AddAtomW GlobalFindAtomW GetOEMCP LoadLibraryExA VirtualProtect SetCalendarInfoA GetConsoleProcessList GetTempPathA GetVolumeInformationW HeapAlloc EncodePointer DecodePointer IsProcessorFeaturePresent GetCommandLineA RaiseException RtlUnwind IsDebuggerPresent HeapFree ExitProcess GetModuleHandleExW WideCharToMultiByte GetStdHandle WriteFile GetProcessHeap EnterCriticalSection LeaveCriticalSection FlushFileBuffers GetConsoleCP GetConsoleMode DeleteCriticalSection HeapSize GetFileType GetStartupInfoW CloseHandle GetCurrentThreadId GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW LoadLibraryExW IsValidCodePage GetACP GetCPInfo OutputDebugStringW SetStdHandle SetFilePointerEx HeapReAlloc LCMapStringW GetStringTypeW CreateFileW

Sharing

General

Malware Config

Signatures

File Explorer

12beb2655f1cc39c31fb53bc72670deef2f6311e0f5c2b22fbc85a4ad3cab306

kernel32

generic