974402091e092f0468290ab1d4380ec41b0cf66f28f683a0102fe9c0af2c7fde[.]exe

General

Target
974402091e092f0468290ab1d4380ec41b0cf66f28f683a0102fe9c0af2c7fde.exe
Size 455KB
Sample240429-bw478aec63
SHA256 974402091e092f0468290ab1d4380ec41b0cf66f28f683a0102fe9c0af2c7fde
MD5 c94ea8fe850a588a628cb3350a52c278
SHA1 869ae193e0262e0367f91410fe1d4972c1ebfcc4
SHA512 c1c202864b43379d90098727b148f027bba3dab699bb7e9684f62078cd19de904c2d6ca10f9f3cddb399ce6e1e0d92eebd03cb146ca99b9f9a056675bb17c3ea
SSDEEP 6144:wPKlSI6wvdEjpq79xyN+PKbaKNt8RUeW2s4A9YoxYrP9nys3ODED:wylSI66yj4nOaaJh9x6tT3wED
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
974402091e092f0468290ab1d4380ec41b0cf66f28f683a0102fe9c0af2c7fde.exe

File Explorer

974402091e092f0468290ab1d4380ec41b0cf66f28f683a0102fe9c0af2c7fde.exe

.exe 455KB

974402091e092f0468290ab1d4380ec41b0cf66f28f683a0102fe9c0af2c7fde.exe

IMPHASH 8c8bbaaa682c013cc75d9e0c38f1112a
SHA256 974402091e092f0468290ab1d4380ec41b0cf66f28f683a0102fe9c0af2c7fde
MD5 c94ea8fe850a588a628cb3350a52c278
SHA1 869ae193e0262e0367f91410fe1d4972c1ebfcc4
SHA512 c1c202864b43379d90098727b148f027bba3dab699bb7e9684f62078cd19de904c2d6ca10f9f3cddb399ce6e1e0d92eebd03cb146ca99b9f9a056675bb17c3ea
SSDEEP 6144:wPKlSI6wvdEjpq79xyN+PKbaKNt8RUeW2s4A9YoxYrP9nys3ODED:wylSI66yj4nOaaJh9x6tT3wED
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

17154

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\zokugohulim55\xeyez\biheluri\nohijidoricu.pdb

kernel32

GetSystemDefaultLangID GlobalMemoryStatus FindResourceA GetLocaleInfoA LoadLibraryExW InterlockedDecrement GetComputerNameW GetSystemDefaultLCID BackupSeek GetConsoleAliasesA GetWindowsDirectoryA EnumTimeFormatsW SetCommState GlobalAlloc GetVolumeInformationA LoadLibraryW LocalShrink TerminateThread ReadConsoleInputA WriteConsoleW GetModuleFileNameW GetACP MultiByteToWideChar GetLastError ChangeTimerQueueTimer SetLastError GetThreadLocale GetProcAddress RemoveDirectoryA SetCalendarInfoW CreateHardLinkW CreateEventW QueryDosDeviceW AddAtomA GlobalFindAtomW BuildCommDCBA VirtualProtect GetConsoleProcessList GetTempPathA SetFileAttributesW EncodePointer DecodePointer HeapReAlloc ExitProcess GetModuleHandleExW AreFileApisANSI WideCharToMultiByte GetCommandLineA RaiseException RtlUnwind IsProcessorFeaturePresent IsDebuggerPresent HeapFree HeapAlloc EnterCriticalSection LeaveCriticalSection FlushFileBuffers WriteFile GetConsoleCP GetConsoleMode DeleteCriticalSection HeapSize GetStdHandle GetFileType GetStartupInfoW GetProcessHeap CloseHandle UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW IsValidCodePage GetOEMCP GetCPInfo GetCurrentThreadId GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle SetFilePointerEx LCMapStringW OutputDebugStringW GetStringTypeW CreateFileW SetEndOfFile ReadFile ReadConsoleW

Sharing