8bb9506aabcde8389c773f69e9f957d7f196e8113ccc0e81e57446deeeeaf70e

General

Target
8bb9506aabcde8389c773f69e9f957d7f196e8113ccc0e81e57446deeeeaf70e
Size 406KB
Sample240429-fs5rssbf6s
SHA256 8bb9506aabcde8389c773f69e9f957d7f196e8113ccc0e81e57446deeeeaf70e
MD5 dca119f48ae676c59f60208073db7b1f
SHA1 825169d4209f8d71f2e19f246a80682709650227
SHA512 298275ce8a901359000bf82223564232e88f87824cd3e815c37419b470fa3734b77228a16efe73ab1b45d5065ef5c124a654045e03c9e907906ba22d536aab8b
SSDEEP 12288:vnCNuxzdlcGaoloHcJu4ysZCRzh8nkIr:vCGdleCCgCRCnkIr
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8bb9506aabcde8389c773f69e9f957d7f196e8113ccc0e81e57446deeeeaf70e

File Explorer

8bb9506aabcde8389c773f69e9f957d7f196e8113ccc0e81e57446deeeeaf70e

.exe 406KB

8bb9506aabcde8389c773f69e9f957d7f196e8113ccc0e81e57446deeeeaf70e

IMPHASH 35d2f187a446fa7dcfd6bfdfd63133ca
SHA256 8bb9506aabcde8389c773f69e9f957d7f196e8113ccc0e81e57446deeeeaf70e
MD5 dca119f48ae676c59f60208073db7b1f
SHA1 825169d4209f8d71f2e19f246a80682709650227
SHA512 298275ce8a901359000bf82223564232e88f87824cd3e815c37419b470fa3734b77228a16efe73ab1b45d5065ef5c124a654045e03c9e907906ba22d536aab8b
SSDEEP 12288:vnCNuxzdlcGaoloHcJu4ysZCRzh8nkIr:vCGdleCCgCRCnkIr
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

17495

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\cigohu\sekucewirukafu-gemecom-wunepehen.pdb

kernel32

GlobalMemoryStatus GetLocaleInfoA FindResourceExW LocalCompact InterlockedDecrement GetComputerNameW CreateHardLinkA GetSystemDefaultLCID BackupSeek GetTickCount GetConsoleAliasesA GetWindowsDirectoryA EnumTimeFormatsW GetUserDefaultLangID SetCommState GlobalAlloc LoadLibraryW ReadConsoleInputA WriteConsoleW GetModuleFileNameW MultiByteToWideChar GetLastError ChangeTimerQueueTimer SetLastError GetThreadLocale GetProcAddress RemoveDirectoryA SetFileAttributesA BuildCommDCBW LoadLibraryA SetCalendarInfoW GetExitCodeThread AddAtomW GlobalFindAtomW GetOEMCP LoadLibraryExA VirtualProtect GetConsoleProcessList GetTempPathA GetVolumeInformationW HeapAlloc EncodePointer DecodePointer IsProcessorFeaturePresent GetCommandLineA RaiseException RtlUnwind IsDebuggerPresent IsValidCodePage GetACP GetCPInfo GetCurrentThreadId HeapFree ExitProcess GetModuleHandleExW WideCharToMultiByte GetStdHandle WriteFile GetProcessHeap EnterCriticalSection LeaveCriticalSection FlushFileBuffers GetConsoleCP GetConsoleMode DeleteCriticalSection HeapSize GetFileType GetStartupInfoW CloseHandle GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW GetStringTypeW LoadLibraryExW OutputDebugStringW LCMapStringW SetStdHandle SetFilePointerEx HeapReAlloc CreateFileW

Sharing

General

Malware Config

Signatures

File Explorer

8bb9506aabcde8389c773f69e9f957d7f196e8113ccc0e81e57446deeeeaf70e

kernel32

generic