d2f0c08bf2164945305833cf291311918663bd94e3b3d7a1e6acceec41d99256[.]exe

General

Target
d2f0c08bf2164945305833cf291311918663bd94e3b3d7a1e6acceec41d99256.exe
Size 452KB
Sample240429-b4trfsfa5z
SHA256 d2f0c08bf2164945305833cf291311918663bd94e3b3d7a1e6acceec41d99256
MD5 f40beac78f1a233adbc65852edda60c3
SHA1 2a791dc233d88b2914af5bcf6b6410a7b3e82ddc
SHA512 f47a28c866ce4afab5d905c7ec33d9484d53b2e8a8175e33358640280b8a210357ef3fd0a7ca6ffcf2934f3ee718b1834a51dda05f3043ccd062f69552a0330f
SSDEEP 6144:rOrXOdV6MDOrctj6AwnV3NPYvEmAYc42VBPg1BwnFo7s4lM:rGO0r5AwlqvExYh0g1MKI4lM
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d2f0c08bf2164945305833cf291311918663bd94e3b3d7a1e6acceec41d99256.exe

File Explorer

d2f0c08bf2164945305833cf291311918663bd94e3b3d7a1e6acceec41d99256.exe

.exe 452KB

d2f0c08bf2164945305833cf291311918663bd94e3b3d7a1e6acceec41d99256.exe

IMPHASH 8c8bbaaa682c013cc75d9e0c38f1112a
SHA256 d2f0c08bf2164945305833cf291311918663bd94e3b3d7a1e6acceec41d99256
MD5 f40beac78f1a233adbc65852edda60c3
SHA1 2a791dc233d88b2914af5bcf6b6410a7b3e82ddc
SHA512 f47a28c866ce4afab5d905c7ec33d9484d53b2e8a8175e33358640280b8a210357ef3fd0a7ca6ffcf2934f3ee718b1834a51dda05f3043ccd062f69552a0330f
SSDEEP 6144:rOrXOdV6MDOrctj6AwnV3NPYvEmAYc42VBPg1BwnFo7s4lM:rGO0r5AwlqvExYh0g1MKI4lM
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

16658

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\kitilokexo\ridijekic\nakutomita37\lifivudi\kad.pdb

kernel32

GetSystemDefaultLangID GlobalMemoryStatus FindResourceA GetLocaleInfoA LoadLibraryExW InterlockedDecrement GetComputerNameW GetSystemDefaultLCID BackupSeek GetConsoleAliasesA GetWindowsDirectoryA EnumTimeFormatsW SetCommState GlobalAlloc GetVolumeInformationA LoadLibraryW LocalShrink TerminateThread ReadConsoleInputA WriteConsoleW GetModuleFileNameW GetACP MultiByteToWideChar GetLastError ChangeTimerQueueTimer SetLastError GetThreadLocale GetProcAddress RemoveDirectoryA SetCalendarInfoW CreateHardLinkW CreateEventW QueryDosDeviceW AddAtomA GlobalFindAtomW BuildCommDCBA VirtualProtect GetConsoleProcessList GetTempPathA SetFileAttributesW EncodePointer DecodePointer HeapReAlloc ExitProcess GetModuleHandleExW AreFileApisANSI WideCharToMultiByte GetCommandLineA RaiseException RtlUnwind IsProcessorFeaturePresent IsDebuggerPresent HeapFree HeapAlloc EnterCriticalSection LeaveCriticalSection FlushFileBuffers WriteFile GetConsoleCP GetConsoleMode DeleteCriticalSection HeapSize GetStdHandle GetFileType GetStartupInfoW GetProcessHeap CloseHandle UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW IsValidCodePage GetOEMCP GetCPInfo GetCurrentThreadId GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle SetFilePointerEx LCMapStringW OutputDebugStringW GetStringTypeW CreateFileW SetEndOfFile ReadFile ReadConsoleW

Sharing