aa8026c7311aee3b5c06a40e4f79210a834332a29b8117e6f6ce201a0a1324f8

General

Target
aa8026c7311aee3b5c06a40e4f79210a834332a29b8117e6f6ce201a0a1324f8
Size 313KB
Sample240428-j96bfabf52
SHA256 aa8026c7311aee3b5c06a40e4f79210a834332a29b8117e6f6ce201a0a1324f8
MD5 7e6234991fd73490ea3efbe23cdbbf88
SHA1 0b56359f5b9491bc483360105e349efab3d782c2
SHA512 c35b99440ea5878993d903ed0c32a4c5d5f250bcd16a08693e29a2103f7f18f705b3926fb00e55395151ceabbb33711eb61e9c6bee5004d17752dcaffa3a74c2
SSDEEP 3072:/1APLETpbodHFWzJLjo+d0+xso/ozWjL/YLLesig+Zi/Ja1vHCZHEQyaJI74Fd:zidA2dm/oqDY+s3+P1CFEQXJBd
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa8026c7311aee3b5c06a40e4f79210a834332a29b8117e6f6ce201a0a1324f8

File Explorer

aa8026c7311aee3b5c06a40e4f79210a834332a29b8117e6f6ce201a0a1324f8

.exe 313KB

aa8026c7311aee3b5c06a40e4f79210a834332a29b8117e6f6ce201a0a1324f8

IMPHASH f654e5c1b5e321f3cf66a20ff016ccab
SHA256 aa8026c7311aee3b5c06a40e4f79210a834332a29b8117e6f6ce201a0a1324f8
MD5 7e6234991fd73490ea3efbe23cdbbf88
SHA1 0b56359f5b9491bc483360105e349efab3d782c2
SHA512 c35b99440ea5878993d903ed0c32a4c5d5f250bcd16a08693e29a2103f7f18f705b3926fb00e55395151ceabbb33711eb61e9c6bee5004d17752dcaffa3a74c2
SSDEEP 3072:/1APLETpbodHFWzJLjo+d0+xso/ozWjL/YLLesig+Zi/Ja1vHCZHEQyaJI74Fd:zidA2dm/oqDY+s3+P1CFEQXJBd
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

17170

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\tihuc.pdb

kernel32

GetSystemDefaultLangID GlobalMemoryStatus FindResourceA GetLocaleInfoA LoadLibraryExW InterlockedDecrement GetComputerNameW GetSystemDefaultLCID BackupSeek GetConsoleAliasesA GetWindowsDirectoryA EnumTimeFormatsW SetCommState GlobalAlloc GetVolumeInformationA LoadLibraryW LocalShrink TerminateThread ReadConsoleInputA WriteConsoleW GetModuleFileNameW GetACP MultiByteToWideChar GetLastError ChangeTimerQueueTimer SetLastError GetThreadLocale GetProcAddress RemoveDirectoryA InterlockedExchangeAdd SetCalendarInfoW CreateHardLinkW CreateEventW QueryDosDeviceW AddAtomA GlobalFindAtomW BuildCommDCBA VirtualProtect GetConsoleProcessList GetTempPathA SetFileAttributesW EncodePointer DecodePointer HeapReAlloc ExitProcess GetModuleHandleExW AreFileApisANSI WideCharToMultiByte GetCommandLineA RaiseException RtlUnwind IsProcessorFeaturePresent IsDebuggerPresent HeapFree HeapAlloc EnterCriticalSection LeaveCriticalSection FlushFileBuffers WriteFile GetConsoleCP GetConsoleMode DeleteCriticalSection HeapSize GetStdHandle GetFileType GetStartupInfoW GetProcessHeap CloseHandle UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW IsValidCodePage GetOEMCP GetCPInfo GetCurrentThreadId GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle SetFilePointerEx LCMapStringW OutputDebugStringW GetStringTypeW CreateFileW SetEndOfFile ReadFile ReadConsoleW

Sharing

General

Malware Config

Signatures

File Explorer

aa8026c7311aee3b5c06a40e4f79210a834332a29b8117e6f6ce201a0a1324f8

kernel32

generic