111cee1f1487b2c42ccd697f912c5902f7de7554b1d05cb0f7c9be73c662e94f

General

Target
111cee1f1487b2c42ccd697f912c5902f7de7554b1d05cb0f7c9be73c662e94f
Size 806KB
Sample240426-s8b6msff91
SHA256 111cee1f1487b2c42ccd697f912c5902f7de7554b1d05cb0f7c9be73c662e94f
MD5 463782cef05afafd58637569802f0838
SHA1 2fe710c16176e529aa12e7f705a1fec52cb1de7d
SHA512 946d9508e98039c7269ee88ca7920f7d8a30aab5189557c2df061874f81ecf36a2c7dbbe9e71b4daa3d7d2efe5e4332b87fdd955c27c13fd57952ab27e792860
SSDEEP 12288:KiN7U9BqdqykCd7k5WvTcSMLhGgbrKiZNP+LNciQVOUYHtGqCBQAXYB:cBqzjI5W7cSMPRoRciQV/fqCBTYB
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
111cee1f1487b2c42ccd697f912c5902f7de7554b1d05cb0f7c9be73c662e94f

File Explorer

111cee1f1487b2c42ccd697f912c5902f7de7554b1d05cb0f7c9be73c662e94f

.exe 806KB

111cee1f1487b2c42ccd697f912c5902f7de7554b1d05cb0f7c9be73c662e94f

IMPHASH 6fabd72c588ac688751259448a0191b3
SHA256 111cee1f1487b2c42ccd697f912c5902f7de7554b1d05cb0f7c9be73c662e94f
MD5 463782cef05afafd58637569802f0838
SHA1 2fe710c16176e529aa12e7f705a1fec52cb1de7d
SHA512 946d9508e98039c7269ee88ca7920f7d8a30aab5189557c2df061874f81ecf36a2c7dbbe9e71b4daa3d7d2efe5e4332b87fdd955c27c13fd57952ab27e792860
SSDEEP 12288:KiN7U9BqdqykCd7k5WvTcSMLhGgbrKiZNP+LNciQVOUYHtGqCBQAXYB:cBqzjI5W7cSMPRoRciQV/fqCBTYB
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

17456

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\vokebumikosoci\wayi_zuxi\zemehemuzewac\xit-wizozek coluvuz.pdb

kernel32

GetSystemDefaultLangID GlobalMemoryStatus GetLocaleInfoA InterlockedDecrement GetComputerNameW GetSystemDefaultLCID BackupSeek GetTickCount GetConsoleAliasesA GetWindowsDirectoryA EnumTimeFormatsW SetCommState GlobalAlloc LoadLibraryW LocalShrink ReadConsoleInputA WriteConsoleW GetModuleFileNameW MultiByteToWideChar GetLastError ChangeTimerQueueTimer SetLastError GetThreadLocale GetProcAddress RemoveDirectoryA SetFileAttributesA LoadLibraryA SetCalendarInfoW CreateHardLinkW GetExitCodeThread AddAtomW CreateEventW GlobalFindAtomW GetOEMCP LoadLibraryExA BuildCommDCBA VirtualProtect GetConsoleProcessList GetTempPathA GetVolumeInformationW HeapAlloc EncodePointer DecodePointer IsProcessorFeaturePresent GetCommandLineA RaiseException RtlUnwind IsDebuggerPresent HeapFree ExitProcess GetModuleHandleExW AreFileApisANSI WideCharToMultiByte GetStdHandle WriteFile GetProcessHeap IsValidCodePage GetACP GetCPInfo GetCurrentThreadId EnterCriticalSection LeaveCriticalSection FlushFileBuffers GetConsoleCP GetConsoleMode DeleteCriticalSection HeapSize GetFileType GetStartupInfoW CloseHandle GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW LoadLibraryExW OutputDebugStringW GetStringTypeW LCMapStringW SetStdHandle SetFilePointerEx HeapReAlloc CreateFileW SetEndOfFile ReadFile ReadConsoleW

Sharing

General

Malware Config

Signatures

File Explorer

111cee1f1487b2c42ccd697f912c5902f7de7554b1d05cb0f7c9be73c662e94f

kernel32

generic