455f4327f9c1e07dec6538bce0edb0b935ad485e0f01cea4e68fa950b42891a2

General

Target
455f4327f9c1e07dec6538bce0edb0b935ad485e0f01cea4e68fa950b42891a2
Size 831KB
Sample240425-cgf3hsdc77
SHA256 455f4327f9c1e07dec6538bce0edb0b935ad485e0f01cea4e68fa950b42891a2
MD5 33bc5b92658baf8f7a4dfc35c9994250
SHA1 30e9143d9d0c8def9bd176663e62049356cd94c9
SHA512 11568d107f8a3de82001811acc0c71506b6e3631b5dd7fc1e62f5e71c7bc324b64b7c1902423cb1b2196c129b60571df189fd6a6516080de4ceeb42271a29136
SSDEEP 12288:RTipzPV+q9TaI+u/htKL1MoFzEKMQe+LfGR1l68u7E9:Rk/aZeh21wQTfa68u7Q
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
455f4327f9c1e07dec6538bce0edb0b935ad485e0f01cea4e68fa950b42891a2

File Explorer

455f4327f9c1e07dec6538bce0edb0b935ad485e0f01cea4e68fa950b42891a2

.exe 831KB

455f4327f9c1e07dec6538bce0edb0b935ad485e0f01cea4e68fa950b42891a2

IMPHASH 3aaa1b88fde88b6f18cce2952dfece3e
SHA256 455f4327f9c1e07dec6538bce0edb0b935ad485e0f01cea4e68fa950b42891a2
MD5 33bc5b92658baf8f7a4dfc35c9994250
SHA1 30e9143d9d0c8def9bd176663e62049356cd94c9
SHA512 11568d107f8a3de82001811acc0c71506b6e3631b5dd7fc1e62f5e71c7bc324b64b7c1902423cb1b2196c129b60571df189fd6a6516080de4ceeb42271a29136
SSDEEP 12288:RTipzPV+q9TaI+u/htKL1MoFzEKMQe+LfGR1l68u7E9:Rk/aZeh21wQTfa68u7Q
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

16223

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\fiwuyusudax\gicud71\zuhawufumib_cawiteyajeyijo\xijemux.pdb

kernel32

GetComputerNameW CreateHardLinkA GetTickCount GetConsoleAliasesA GetCompressedFileSizeW EnumTimeFormatsA GetUserDefaultLangID FindResourceExA GetLocaleInfoW MultiByteToWideChar GetTempPathW InterlockedExchange GetLastError ChangeTimerQueueTimer SetLastError GetThreadLocale GetProcAddress LocalCompact BuildCommDCBW LoadLibraryA WriteConsoleA LocalAlloc GetExitCodeThread AddAtomW RemoveDirectoryW SetNamedPipeHandleState GlobalFindAtomW GetModuleFileNameA GetOEMCP GlobalUnWire FindFirstChangeNotificationA LoadLibraryExA SetCalendarInfoA ReadConsoleInputW GetWindowsDirectoryW GetConsoleProcessList GetVolumeInformationW SetFileAttributesA GetSystemDefaultLangID WriteConsoleW GetStringTypeW EncodePointer DecodePointer IsProcessorFeaturePresent GetCommandLineA RaiseException RtlUnwind IsDebuggerPresent HeapFree HeapAlloc ExitProcess GetModuleHandleExW WideCharToMultiByte HeapSize EnterCriticalSection LeaveCriticalSection GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW CloseHandle GetCurrentThreadId GetProcessHeap WriteFile GetModuleFileNameW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW LoadLibraryExW IsValidCodePage GetACP GetCPInfo HeapReAlloc LCMapStringW GetConsoleCP GetConsoleMode SetFilePointerEx SetStdHandle FlushFileBuffers OutputDebugStringW CreateFileW

advapi32

DeregisterEventSource

winhttp

WinHttpOpen

Sharing

General

Malware Config

Signatures

File Explorer

455f4327f9c1e07dec6538bce0edb0b935ad485e0f01cea4e68fa950b42891a2

kernel32

advapi32

winhttp

generic