48ed48f4db001bd7e5a5bfa03b7c8b6cb20aa22593ad8454e8d54c65234b8d73

General

Target
48ed48f4db001bd7e5a5bfa03b7c8b6cb20aa22593ad8454e8d54c65234b8d73
Size 451KB
Sample240429-fl3c4aba86
SHA256 48ed48f4db001bd7e5a5bfa03b7c8b6cb20aa22593ad8454e8d54c65234b8d73
MD5 9d7c0fcbfea97ac283f4e68707245250
SHA1 7d4f5822aee7512b308db3baaeb5d0557abf2469
SHA512 b7377ae1af7f6867ac1a5ae67c8a9ccbcaffb41f201a0f57c9b792cb4515571cd50ff3718057e431fb31e673b85102fea8c82a58821ee84d22d0d5e28657bdd2
SSDEEP 6144:EbizKU6CpA9+9+HDs15JInfn07l7Ro9+mdb7nrAUYj9To2BwMt2jBse7NU:EbMKUHmcQs7Po9+esUYjq2SUUTBU
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48ed48f4db001bd7e5a5bfa03b7c8b6cb20aa22593ad8454e8d54c65234b8d73

File Explorer

48ed48f4db001bd7e5a5bfa03b7c8b6cb20aa22593ad8454e8d54c65234b8d73

.exe 451KB

48ed48f4db001bd7e5a5bfa03b7c8b6cb20aa22593ad8454e8d54c65234b8d73

IMPHASH f8d3d580c89ab890cee57ed29743eeb7
SHA256 48ed48f4db001bd7e5a5bfa03b7c8b6cb20aa22593ad8454e8d54c65234b8d73
MD5 9d7c0fcbfea97ac283f4e68707245250
SHA1 7d4f5822aee7512b308db3baaeb5d0557abf2469
SHA512 b7377ae1af7f6867ac1a5ae67c8a9ccbcaffb41f201a0f57c9b792cb4515571cd50ff3718057e431fb31e673b85102fea8c82a58821ee84d22d0d5e28657bdd2
SSDEEP 6144:EbizKU6CpA9+9+HDs15JInfn07l7Ro9+mdb7nrAUYj9To2BwMt2jBse7NU:EbMKUHmcQs7Po9+esUYjq2SUUTBU
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

17282

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\mud gobegu\xigubuwo53\lopim cib.pdb

kernel32

GetSystemDefaultLangID GetComputerNameA GlobalMemoryStatus FindResourceA GetLocaleInfoA CommConfigDialogA LoadLibraryExW InterlockedDecrement CreateHardLinkA BackupSeek GetConsoleAliasesA GetWindowsDirectoryA EnumTimeFormatsA SetCommState GlobalAlloc GetVolumeInformationA LoadLibraryW LocalShrink TerminateThread ReadConsoleInputA CreateEventA WriteConsoleW GetModuleFileNameW GetSystemDirectoryA GetACP MultiByteToWideChar GetLastError SetLastError GetThreadLocale GetProcAddress RemoveDirectoryA InterlockedExchangeAdd SetCalendarInfoW QueryDosDeviceW AddAtomA GlobalFindAtomW BuildCommDCBA VirtualProtect GetVersionExA GetTempPathA SetFileAttributesW EncodePointer DecodePointer HeapReAlloc ExitProcess GetModuleHandleExW AreFileApisANSI WideCharToMultiByte GetCommandLineW RaiseException RtlUnwind IsProcessorFeaturePresent IsDebuggerPresent HeapFree HeapAlloc EnterCriticalSection LeaveCriticalSection FlushFileBuffers WriteFile GetConsoleCP GetConsoleMode DeleteCriticalSection HeapSize GetProcessHeap GetStdHandle GetFileType GetStartupInfoW CloseHandle UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW IsValidCodePage GetOEMCP GetCPInfo GetCurrentThreadId QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle SetFilePointerEx LCMapStringW OutputDebugStringW GetStringTypeW CreateFileW SetEndOfFile ReadFile ReadConsoleW

Sharing

General

Malware Config

Signatures

File Explorer

48ed48f4db001bd7e5a5bfa03b7c8b6cb20aa22593ad8454e8d54c65234b8d73

kernel32

generic