400c3c38e07a136cb766ece3063b5a232194aa23c3c1a46b6af4465ed793207d

General

Target
400c3c38e07a136cb766ece3063b5a232194aa23c3c1a46b6af4465ed793207d
Size 811KB
Sample240428-glc9mshf91
SHA256 400c3c38e07a136cb766ece3063b5a232194aa23c3c1a46b6af4465ed793207d
MD5 3b7cb7fae5707ae3e2ea26069ebcca43
SHA1 1ca6d1cd0fbc779e79c3330e890b641c3cf9ec20
SHA512 d7ae99687db122aae398a62f9b4d57f6cd468a502bf83ab19d8f13952580eaf4565a8dc4b45dfc2baaef8e55981d75e6d0f99effc9becfad0fca33e3a9e74234
SSDEEP 12288:2v05HBL32kp/jDenJPoykKrwFlAfwlUdlV4L6hDo9fvbkt1X7mDf6LIYLwE:9hjV5j6nyytrcAfwlWYGQIrib6zLwE
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
400c3c38e07a136cb766ece3063b5a232194aa23c3c1a46b6af4465ed793207d

File Explorer

400c3c38e07a136cb766ece3063b5a232194aa23c3c1a46b6af4465ed793207d

.exe 811KB

400c3c38e07a136cb766ece3063b5a232194aa23c3c1a46b6af4465ed793207d

IMPHASH 8c8bbaaa682c013cc75d9e0c38f1112a
SHA256 400c3c38e07a136cb766ece3063b5a232194aa23c3c1a46b6af4465ed793207d
MD5 3b7cb7fae5707ae3e2ea26069ebcca43
SHA1 1ca6d1cd0fbc779e79c3330e890b641c3cf9ec20
SHA512 d7ae99687db122aae398a62f9b4d57f6cd468a502bf83ab19d8f13952580eaf4565a8dc4b45dfc2baaef8e55981d75e6d0f99effc9becfad0fca33e3a9e74234
SSDEEP 12288:2v05HBL32kp/jDenJPoykKrwFlAfwlUdlV4L6hDo9fvbkt1X7mDf6LIYLwE:9hjV5j6nyytrcAfwlWYGQIrib6zLwE
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

17154

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\luc57\moluhivotat hatebapiz73\titukelihogat\wuk73\xi.pdb

kernel32

GetSystemDefaultLangID GlobalMemoryStatus FindResourceA GetLocaleInfoA LoadLibraryExW InterlockedDecrement GetComputerNameW GetSystemDefaultLCID BackupSeek GetConsoleAliasesA GetWindowsDirectoryA EnumTimeFormatsW SetCommState GlobalAlloc GetVolumeInformationA LoadLibraryW LocalShrink TerminateThread ReadConsoleInputA WriteConsoleW GetModuleFileNameW GetACP MultiByteToWideChar GetLastError ChangeTimerQueueTimer SetLastError GetThreadLocale GetProcAddress RemoveDirectoryA SetCalendarInfoW CreateHardLinkW CreateEventW QueryDosDeviceW AddAtomA GlobalFindAtomW BuildCommDCBA VirtualProtect GetConsoleProcessList GetTempPathA SetFileAttributesW EncodePointer DecodePointer HeapReAlloc ExitProcess GetModuleHandleExW AreFileApisANSI WideCharToMultiByte GetCommandLineA RaiseException RtlUnwind IsProcessorFeaturePresent IsDebuggerPresent HeapFree HeapAlloc EnterCriticalSection LeaveCriticalSection FlushFileBuffers WriteFile GetConsoleCP GetConsoleMode DeleteCriticalSection HeapSize GetStdHandle GetFileType GetStartupInfoW GetProcessHeap CloseHandle UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW IsValidCodePage GetOEMCP GetCPInfo GetCurrentThreadId GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle SetFilePointerEx LCMapStringW OutputDebugStringW GetStringTypeW CreateFileW SetEndOfFile ReadFile ReadConsoleW

Sharing

General

Malware Config

Signatures

File Explorer

400c3c38e07a136cb766ece3063b5a232194aa23c3c1a46b6af4465ed793207d

kernel32

generic