0cf1139c9d627b774b9b3bd5980d15d2ccf20398e1c8c718d24e9c66d6888bc9

General

Target
0cf1139c9d627b774b9b3bd5980d15d2ccf20398e1c8c718d24e9c66d6888bc9
Size 261KB
Sample240429-ff72dsag79
SHA256 0cf1139c9d627b774b9b3bd5980d15d2ccf20398e1c8c718d24e9c66d6888bc9
MD5 0d5bdac01d16317b14207aa55ecfa36f
SHA1 2729dbf15ddf3448828f9b329e9937ee76e9fe6e
SHA512 e19b0d7fad6826f6a19d8f3daa79817f95cfc9b685479a07c446e81d44237c2aefecd5c22fc63822aa0505e6e8d9ddad719258dc4d5b7178f3e689e204d978b0
SSDEEP 6144:/k2sL1gtgD9ElKEs5daY+ZnFsdEL4tRDs:/k2sL5RExs5IdZmdELuRDs
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0cf1139c9d627b774b9b3bd5980d15d2ccf20398e1c8c718d24e9c66d6888bc9

File Explorer

0cf1139c9d627b774b9b3bd5980d15d2ccf20398e1c8c718d24e9c66d6888bc9

.exe 261KB

0cf1139c9d627b774b9b3bd5980d15d2ccf20398e1c8c718d24e9c66d6888bc9

IMPHASH 7dd08063ba15d7295e29dcfabb5e9889
SHA256 0cf1139c9d627b774b9b3bd5980d15d2ccf20398e1c8c718d24e9c66d6888bc9
MD5 0d5bdac01d16317b14207aa55ecfa36f
SHA1 2729dbf15ddf3448828f9b329e9937ee76e9fe6e
SHA512 e19b0d7fad6826f6a19d8f3daa79817f95cfc9b685479a07c446e81d44237c2aefecd5c22fc63822aa0505e6e8d9ddad719258dc4d5b7178f3e689e204d978b0
SSDEEP 6144:/k2sL1gtgD9ElKEs5daY+ZnFsdEL4tRDs:/k2sL5RExs5IdZmdELuRDs
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

16748

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\vawubi\miyigabitiwu\gizuzekajizoz\sutarixo\faha-ripozimavo.pdb

kernel32

GetSystemDefaultLangID GlobalMemoryStatus GetLocaleInfoA FindResourceExW LocalCompact InterlockedDecrement GetComputerNameW CreateHardLinkA BackupSeek GetTickCount GetConsoleAliasesA GetWindowsDirectoryA EnumTimeFormatsW GetUserDefaultLangID SetCommState GlobalAlloc LoadLibraryW ReadConsoleInputA WriteConsoleW GetModuleFileNameW MultiByteToWideChar GetLastError ChangeTimerQueueTimer SetLastError GetThreadLocale GetProcAddress RemoveDirectoryA SetFileAttributesA BuildCommDCBW LoadLibraryA GetExitCodeThread AddAtomW GlobalFindAtomW GetOEMCP LoadLibraryExA VirtualProtect SetCalendarInfoA GetConsoleProcessList GetTempPathA GetVolumeInformationW HeapAlloc EncodePointer DecodePointer IsProcessorFeaturePresent GetCommandLineA RaiseException RtlUnwind IsDebuggerPresent HeapFree ExitProcess GetModuleHandleExW WideCharToMultiByte GetStdHandle WriteFile GetProcessHeap EnterCriticalSection LeaveCriticalSection FlushFileBuffers GetConsoleCP GetConsoleMode DeleteCriticalSection HeapSize GetFileType GetStartupInfoW CloseHandle GetCurrentThreadId GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW LoadLibraryExW IsValidCodePage GetACP GetCPInfo OutputDebugStringW SetStdHandle SetFilePointerEx HeapReAlloc LCMapStringW GetStringTypeW CreateFileW

Sharing

General

Malware Config

Signatures

File Explorer

0cf1139c9d627b774b9b3bd5980d15d2ccf20398e1c8c718d24e9c66d6888bc9

kernel32

generic