22ab5795698611fa99a7c1f70bada5405ccb2fd7155e3bec2ba4e8799252c8e4

General

Target
22ab5795698611fa99a7c1f70bada5405ccb2fd7155e3bec2ba4e8799252c8e4
Size 451KB
Sample240428-rl82eshh51
SHA256 22ab5795698611fa99a7c1f70bada5405ccb2fd7155e3bec2ba4e8799252c8e4
MD5 786b43ee5605201ac48f5b44799603c8
SHA1 5b0e5f46befa00b6d78a3b02e8b9632590780bf2
SHA512 92b29c7ed01af154dfff13c7ac1841f5d49688add3d51f24516249f112e2577aba9f260241bfcc6d9e98d803d64fd5e27764abe87948ddbcdb2f79ec93504aec
SSDEEP 6144:+0HYlMeYOX8mE94DowCxV0jZVqmnvi1UVX1Zbt2S0gjaUK:+04lMXmQ4LCxWjZji1U/rhaUK
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
22ab5795698611fa99a7c1f70bada5405ccb2fd7155e3bec2ba4e8799252c8e4

File Explorer

22ab5795698611fa99a7c1f70bada5405ccb2fd7155e3bec2ba4e8799252c8e4

.exe 451KB

22ab5795698611fa99a7c1f70bada5405ccb2fd7155e3bec2ba4e8799252c8e4

IMPHASH fc30ce1f37fa7cd963320fd0a84f3bf6
SHA256 22ab5795698611fa99a7c1f70bada5405ccb2fd7155e3bec2ba4e8799252c8e4
MD5 786b43ee5605201ac48f5b44799603c8
SHA1 5b0e5f46befa00b6d78a3b02e8b9632590780bf2
SHA512 92b29c7ed01af154dfff13c7ac1841f5d49688add3d51f24516249f112e2577aba9f260241bfcc6d9e98d803d64fd5e27764abe87948ddbcdb2f79ec93504aec
SSDEEP 6144:+0HYlMeYOX8mE94DowCxV0jZVqmnvi1UVX1Zbt2S0gjaUK:+04lMXmQ4LCxWjZji1U/rhaUK
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

17266

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\depefenitux\doyidutor\j.pdb

kernel32

GetSystemDefaultLangID GlobalMemoryStatus FindResourceA GetLocaleInfoA LoadLibraryExW InterlockedDecrement GetComputerNameW CreateHardLinkA BackupSeek GetConsoleAliasesA GetWindowsDirectoryA EnumTimeFormatsA SetCommState GlobalAlloc GetVolumeInformationA LoadLibraryW LocalShrink TerminateThread ReadConsoleInputA CreateEventA WriteConsoleW GetModuleFileNameW GetSystemDirectoryA GetACP MultiByteToWideChar GetLastError ChangeTimerQueueTimer SetLastError GetThreadLocale GetProcAddress RemoveDirectoryA InterlockedExchangeAdd SetCalendarInfoW QueryDosDeviceW AddAtomA GlobalFindAtomW BuildCommDCBA VirtualProtect GetConsoleProcessList GetTempPathA SetFileAttributesW EncodePointer DecodePointer HeapReAlloc ExitProcess GetModuleHandleExW AreFileApisANSI WideCharToMultiByte GetCommandLineW RaiseException RtlUnwind IsProcessorFeaturePresent IsDebuggerPresent HeapFree HeapAlloc EnterCriticalSection LeaveCriticalSection FlushFileBuffers WriteFile GetConsoleCP GetConsoleMode DeleteCriticalSection HeapSize GetProcessHeap GetStdHandle GetFileType GetStartupInfoW CloseHandle UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW IsValidCodePage GetOEMCP GetCPInfo GetCurrentThreadId QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle SetFilePointerEx LCMapStringW OutputDebugStringW GetStringTypeW CreateFileW SetEndOfFile ReadFile ReadConsoleW

Sharing

General

Malware Config

Signatures

File Explorer

22ab5795698611fa99a7c1f70bada5405ccb2fd7155e3bec2ba4e8799252c8e4

kernel32

generic