04043ec3c8c32b4b61ded42edb10fde3953690570505346e8c355946b2219574

General

Target
04043ec3c8c32b4b61ded42edb10fde3953690570505346e8c355946b2219574
Size 451KB
Sample240428-vdthjscc48
SHA256 04043ec3c8c32b4b61ded42edb10fde3953690570505346e8c355946b2219574
MD5 209baf341efd2d94d4a0158294c04d02
SHA1 3cfc11e2fd0a262ffad1359f7b127b9e74efd90c
SHA512 a57aa8d108c553011b7afa105f109954e52381f4b7997a2e57e4b36a2fdbcbbf4b16026e58e1022d83c34c0e75daff36c4c19d9baf8daad025b199b89e8500b2
SSDEEP 6144:EbizKU6CpA9+9+HDs15JInfn07l7Ro9+mdb7nrAUYj9To2BwMt2jBse7NUq:EbMKUHmcQs7Po9+esUYjq2SUUTBUq
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04043ec3c8c32b4b61ded42edb10fde3953690570505346e8c355946b2219574

File Explorer

04043ec3c8c32b4b61ded42edb10fde3953690570505346e8c355946b2219574

.exe 451KB

04043ec3c8c32b4b61ded42edb10fde3953690570505346e8c355946b2219574

IMPHASH f8d3d580c89ab890cee57ed29743eeb7
SHA256 04043ec3c8c32b4b61ded42edb10fde3953690570505346e8c355946b2219574
MD5 209baf341efd2d94d4a0158294c04d02
SHA1 3cfc11e2fd0a262ffad1359f7b127b9e74efd90c
SHA512 a57aa8d108c553011b7afa105f109954e52381f4b7997a2e57e4b36a2fdbcbbf4b16026e58e1022d83c34c0e75daff36c4c19d9baf8daad025b199b89e8500b2
SSDEEP 6144:EbizKU6CpA9+9+HDs15JInfn07l7Ro9+mdb7nrAUYj9To2BwMt2jBse7NUq:EbMKUHmcQs7Po9+esUYjq2SUUTBUq
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

17282

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\mud gobegu\xigubuwo53\lopim cib.pdb

kernel32

GetSystemDefaultLangID GetComputerNameA GlobalMemoryStatus FindResourceA GetLocaleInfoA CommConfigDialogA LoadLibraryExW InterlockedDecrement CreateHardLinkA BackupSeek GetConsoleAliasesA GetWindowsDirectoryA EnumTimeFormatsA SetCommState GlobalAlloc GetVolumeInformationA LoadLibraryW LocalShrink TerminateThread ReadConsoleInputA CreateEventA WriteConsoleW GetModuleFileNameW GetSystemDirectoryA GetACP MultiByteToWideChar GetLastError SetLastError GetThreadLocale GetProcAddress RemoveDirectoryA InterlockedExchangeAdd SetCalendarInfoW QueryDosDeviceW AddAtomA GlobalFindAtomW BuildCommDCBA VirtualProtect GetVersionExA GetTempPathA SetFileAttributesW EncodePointer DecodePointer HeapReAlloc ExitProcess GetModuleHandleExW AreFileApisANSI WideCharToMultiByte GetCommandLineW RaiseException RtlUnwind IsProcessorFeaturePresent IsDebuggerPresent HeapFree HeapAlloc EnterCriticalSection LeaveCriticalSection FlushFileBuffers WriteFile GetConsoleCP GetConsoleMode DeleteCriticalSection HeapSize GetProcessHeap GetStdHandle GetFileType GetStartupInfoW CloseHandle UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW IsValidCodePage GetOEMCP GetCPInfo GetCurrentThreadId QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle SetFilePointerEx LCMapStringW OutputDebugStringW GetStringTypeW CreateFileW SetEndOfFile ReadFile ReadConsoleW

Sharing

General

Malware Config

Signatures

File Explorer

04043ec3c8c32b4b61ded42edb10fde3953690570505346e8c355946b2219574

kernel32

generic