5bb83f0ba00575c13ebd140a39a6f08a109e262dcadf5d6acf1e1df06dfd2192[.]exe

General

Target
5bb83f0ba00575c13ebd140a39a6f08a109e262dcadf5d6acf1e1df06dfd2192.exe
Size 457KB
Sample240429-bnbkyaed31
SHA256 5bb83f0ba00575c13ebd140a39a6f08a109e262dcadf5d6acf1e1df06dfd2192
MD5 b8cada23248c735be688419576776c79
SHA1 560bcac9ae8062b07e6fca1db673b19b7d44c41a
SHA512 f167e6b70893ffbe8f4ec77089bee4a2145d3faa9e084a96493ade518e0a2f008faaf1607cced683f2a5d0acfc2851e0e1eebc33b812ec5b2c1a00227e427f6d
SSDEEP 6144:xH1aphP6ZxqlnU3ijOJj58v9X6/7rYlce7nVElm2Et6pdF:xVanaIlnUBKvF64lVXupdF
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5bb83f0ba00575c13ebd140a39a6f08a109e262dcadf5d6acf1e1df06dfd2192.exe

File Explorer

5bb83f0ba00575c13ebd140a39a6f08a109e262dcadf5d6acf1e1df06dfd2192.exe

.exe 457KB

5bb83f0ba00575c13ebd140a39a6f08a109e262dcadf5d6acf1e1df06dfd2192.exe

IMPHASH f654e5c1b5e321f3cf66a20ff016ccab
SHA256 5bb83f0ba00575c13ebd140a39a6f08a109e262dcadf5d6acf1e1df06dfd2192
MD5 b8cada23248c735be688419576776c79
SHA1 560bcac9ae8062b07e6fca1db673b19b7d44c41a
SHA512 f167e6b70893ffbe8f4ec77089bee4a2145d3faa9e084a96493ade518e0a2f008faaf1607cced683f2a5d0acfc2851e0e1eebc33b812ec5b2c1a00227e427f6d
SSDEEP 6144:xH1aphP6ZxqlnU3ijOJj58v9X6/7rYlce7nVElm2Et6pdF:xVanaIlnUBKvF64lVXupdF
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

17170

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\huzufaloyalama\nuwu_ton\catadiperudef-45\gijip\yasi.pdb

kernel32

GetSystemDefaultLangID GlobalMemoryStatus FindResourceA GetLocaleInfoA LoadLibraryExW InterlockedDecrement GetComputerNameW GetSystemDefaultLCID BackupSeek GetConsoleAliasesA GetWindowsDirectoryA EnumTimeFormatsW SetCommState GlobalAlloc GetVolumeInformationA LoadLibraryW LocalShrink TerminateThread ReadConsoleInputA WriteConsoleW GetModuleFileNameW GetACP MultiByteToWideChar GetLastError ChangeTimerQueueTimer SetLastError GetThreadLocale GetProcAddress RemoveDirectoryA InterlockedExchangeAdd SetCalendarInfoW CreateHardLinkW CreateEventW QueryDosDeviceW AddAtomA GlobalFindAtomW BuildCommDCBA VirtualProtect GetConsoleProcessList GetTempPathA SetFileAttributesW EncodePointer DecodePointer HeapReAlloc ExitProcess GetModuleHandleExW AreFileApisANSI WideCharToMultiByte GetCommandLineA RaiseException RtlUnwind IsProcessorFeaturePresent IsDebuggerPresent HeapFree HeapAlloc EnterCriticalSection LeaveCriticalSection FlushFileBuffers WriteFile GetConsoleCP GetConsoleMode DeleteCriticalSection HeapSize GetStdHandle GetFileType GetStartupInfoW GetProcessHeap CloseHandle UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW IsValidCodePage GetOEMCP GetCPInfo GetCurrentThreadId GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle SetFilePointerEx LCMapStringW OutputDebugStringW GetStringTypeW CreateFileW SetEndOfFile ReadFile ReadConsoleW

Sharing