47134c68fce464e80209ddaffc71e17ac4852fd4ec6f26ffcf75e461ab6adc29

General

Target
47134c68fce464e80209ddaffc71e17ac4852fd4ec6f26ffcf75e461ab6adc29
Size 451KB
Sample240429-flmbwaba69
SHA256 47134c68fce464e80209ddaffc71e17ac4852fd4ec6f26ffcf75e461ab6adc29
MD5 c58df82b7146e046d56980fed1a9f4be
SHA1 a9c2a18f46a39dd6dcb7d61106ffedd4861f10b1
SHA512 21c9dbec7cfe63076b4c279574ade07c0ecfac6670edeae79bedf6a1b1cf2d4f396b3fef64233cc1b6cb14864930ab063081c398db0aba19f66b54778460b3af
SSDEEP 6144:EbizKU6CpA9+9+HDs15JInfn07l7Ro9+mdb7nrAUYj9To2BwMt2jBse7NUn:EbMKUHmcQs7Po9+esUYjq2SUUTBUn
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
47134c68fce464e80209ddaffc71e17ac4852fd4ec6f26ffcf75e461ab6adc29

File Explorer

47134c68fce464e80209ddaffc71e17ac4852fd4ec6f26ffcf75e461ab6adc29

.exe 451KB

47134c68fce464e80209ddaffc71e17ac4852fd4ec6f26ffcf75e461ab6adc29

IMPHASH f8d3d580c89ab890cee57ed29743eeb7
SHA256 47134c68fce464e80209ddaffc71e17ac4852fd4ec6f26ffcf75e461ab6adc29
MD5 c58df82b7146e046d56980fed1a9f4be
SHA1 a9c2a18f46a39dd6dcb7d61106ffedd4861f10b1
SHA512 21c9dbec7cfe63076b4c279574ade07c0ecfac6670edeae79bedf6a1b1cf2d4f396b3fef64233cc1b6cb14864930ab063081c398db0aba19f66b54778460b3af
SSDEEP 6144:EbizKU6CpA9+9+HDs15JInfn07l7Ro9+mdb7nrAUYj9To2BwMt2jBse7NUn:EbMKUHmcQs7Po9+esUYjq2SUUTBUn
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

17282

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\mud gobegu\xigubuwo53\lopim cib.pdb

kernel32

GetSystemDefaultLangID GetComputerNameA GlobalMemoryStatus FindResourceA GetLocaleInfoA CommConfigDialogA LoadLibraryExW InterlockedDecrement CreateHardLinkA BackupSeek GetConsoleAliasesA GetWindowsDirectoryA EnumTimeFormatsA SetCommState GlobalAlloc GetVolumeInformationA LoadLibraryW LocalShrink TerminateThread ReadConsoleInputA CreateEventA WriteConsoleW GetModuleFileNameW GetSystemDirectoryA GetACP MultiByteToWideChar GetLastError SetLastError GetThreadLocale GetProcAddress RemoveDirectoryA InterlockedExchangeAdd SetCalendarInfoW QueryDosDeviceW AddAtomA GlobalFindAtomW BuildCommDCBA VirtualProtect GetVersionExA GetTempPathA SetFileAttributesW EncodePointer DecodePointer HeapReAlloc ExitProcess GetModuleHandleExW AreFileApisANSI WideCharToMultiByte GetCommandLineW RaiseException RtlUnwind IsProcessorFeaturePresent IsDebuggerPresent HeapFree HeapAlloc EnterCriticalSection LeaveCriticalSection FlushFileBuffers WriteFile GetConsoleCP GetConsoleMode DeleteCriticalSection HeapSize GetProcessHeap GetStdHandle GetFileType GetStartupInfoW CloseHandle UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW IsValidCodePage GetOEMCP GetCPInfo GetCurrentThreadId QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle SetFilePointerEx LCMapStringW OutputDebugStringW GetStringTypeW CreateFileW SetEndOfFile ReadFile ReadConsoleW

Sharing

General

Malware Config

Signatures

File Explorer

47134c68fce464e80209ddaffc71e17ac4852fd4ec6f26ffcf75e461ab6adc29

kernel32

generic