8fccb807b4e815a83f1b75c048b85ab71ef3d378aea8909b5c0ec5bdde148fd8

General

Target
8fccb807b4e815a83f1b75c048b85ab71ef3d378aea8909b5c0ec5bdde148fd8
Size 431KB
Sample240426-3bmafsfa5w
SHA256 8fccb807b4e815a83f1b75c048b85ab71ef3d378aea8909b5c0ec5bdde148fd8
MD5 a2f6f2ec1505130da14c2bf6f6cad264
SHA1 d184c612cf3737532552c99358080fae4bfacca4
SHA512 5552bf530343cf6a077f221423b81d21c8f0a33cac212c4e09e4eb3aabdee75dace9a02ccee2ffa0c88a549133adb4e51ee08bee82229ac26fa77ced41c01b59
SSDEEP 12288:pzE/JXGSxAxt9y/SkVDi0XSOoaOAG634KK1:cXGSx89y/SkdOT6IKu
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8fccb807b4e815a83f1b75c048b85ab71ef3d378aea8909b5c0ec5bdde148fd8

File Explorer

8fccb807b4e815a83f1b75c048b85ab71ef3d378aea8909b5c0ec5bdde148fd8

.exe 431KB

8fccb807b4e815a83f1b75c048b85ab71ef3d378aea8909b5c0ec5bdde148fd8

IMPHASH 1cd8d44520c2e3583895f01ac332cc01
SHA256 8fccb807b4e815a83f1b75c048b85ab71ef3d378aea8909b5c0ec5bdde148fd8
MD5 a2f6f2ec1505130da14c2bf6f6cad264
SHA1 d184c612cf3737532552c99358080fae4bfacca4
SHA512 5552bf530343cf6a077f221423b81d21c8f0a33cac212c4e09e4eb3aabdee75dace9a02ccee2ffa0c88a549133adb4e51ee08bee82229ac26fa77ced41c01b59
SSDEEP 12288:pzE/JXGSxAxt9y/SkVDi0XSOoaOAG634KK1:cXGSx89y/SkdOT6IKu
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

16642

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\velup.pdb

kernel32

GetSystemDefaultLangID GlobalMemoryStatus FindResourceA GetLocaleInfoA LoadLibraryExW InterlockedDecrement GetComputerNameW GetSystemDefaultLCID BackupSeek GetTickCount GetConsoleAliasesA GetWindowsDirectoryA EnumTimeFormatsW SetCommState GlobalAlloc GetVolumeInformationA LoadLibraryW LocalShrink ReadConsoleInputA WriteConsoleW GetModuleFileNameW MultiByteToWideChar GetLastError ChangeTimerQueueTimer SetLastError GetThreadLocale GetProcAddress RemoveDirectoryA SetFileAttributesA LoadLibraryA SetCalendarInfoW CreateHardLinkW GetExitCodeThread CreateEventW QueryDosDeviceW AddAtomA GlobalFindAtomW GetOEMCP BuildCommDCBA VirtualProtect GetConsoleProcessList GetTempPathA EncodePointer DecodePointer HeapReAlloc ExitProcess GetModuleHandleExW AreFileApisANSI WideCharToMultiByte GetCommandLineA RaiseException RtlUnwind IsProcessorFeaturePresent IsDebuggerPresent HeapFree HeapAlloc EnterCriticalSection LeaveCriticalSection FlushFileBuffers WriteFile GetConsoleCP GetConsoleMode DeleteCriticalSection HeapSize GetStdHandle GetFileType GetStartupInfoW GetProcessHeap CloseHandle UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW IsValidCodePage GetACP GetCPInfo GetCurrentThreadId GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle SetFilePointerEx LCMapStringW OutputDebugStringW GetStringTypeW CreateFileW SetEndOfFile ReadFile ReadConsoleW

Sharing

General

Malware Config

Signatures

File Explorer

8fccb807b4e815a83f1b75c048b85ab71ef3d378aea8909b5c0ec5bdde148fd8

kernel32

generic