f5dfbe131bee62d14c8ec22d39441965c31a6329ab3a90969116990a39a7e847

General

Target
f5dfbe131bee62d14c8ec22d39441965c31a6329ab3a90969116990a39a7e847
Size 311KB
Sample240429-pr1k5aba6w
SHA256 f5dfbe131bee62d14c8ec22d39441965c31a6329ab3a90969116990a39a7e847
MD5 ff43d753e5a865d2ce56c26c0f61a980
SHA1 d495d2a0d9dccb27e7755fe359e453bdbe632724
SHA512 6c21f36ce2e3e2a3854aebb54551ae6a3e8699fd837b3c74d9ae613f9658bee0d3593a821e35e06fd207563070c1192974a38c6be3ce33b2d2a6fc292eefb1cf
SSDEEP 3072:h1KVGr1WppYqers2HnbL+czhwt0mNIIaL/RsFqvVokiLdLpJ/W0m/lHMwWF9ymk2:+z7CLc0mNIbLZsKQLlWbM17JODE
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5dfbe131bee62d14c8ec22d39441965c31a6329ab3a90969116990a39a7e847

File Explorer

f5dfbe131bee62d14c8ec22d39441965c31a6329ab3a90969116990a39a7e847

.exe 311KB

f5dfbe131bee62d14c8ec22d39441965c31a6329ab3a90969116990a39a7e847

IMPHASH 8c8bbaaa682c013cc75d9e0c38f1112a
SHA256 f5dfbe131bee62d14c8ec22d39441965c31a6329ab3a90969116990a39a7e847
MD5 ff43d753e5a865d2ce56c26c0f61a980
SHA1 d495d2a0d9dccb27e7755fe359e453bdbe632724
SHA512 6c21f36ce2e3e2a3854aebb54551ae6a3e8699fd837b3c74d9ae613f9658bee0d3593a821e35e06fd207563070c1192974a38c6be3ce33b2d2a6fc292eefb1cf
SSDEEP 3072:h1KVGr1WppYqers2HnbL+czhwt0mNIIaL/RsFqvVokiLdLpJ/W0m/lHMwWF9ymk2:+z7CLc0mNIbLZsKQLlWbM17JODE
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

17154

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\muc38_nubuvuwug17\hucojo.pdb

kernel32

GetSystemDefaultLangID GlobalMemoryStatus FindResourceA GetLocaleInfoA LoadLibraryExW InterlockedDecrement GetComputerNameW GetSystemDefaultLCID BackupSeek GetConsoleAliasesA GetWindowsDirectoryA EnumTimeFormatsW SetCommState GlobalAlloc GetVolumeInformationA LoadLibraryW LocalShrink TerminateThread ReadConsoleInputA WriteConsoleW GetModuleFileNameW GetACP MultiByteToWideChar GetLastError ChangeTimerQueueTimer SetLastError GetThreadLocale GetProcAddress RemoveDirectoryA SetCalendarInfoW CreateHardLinkW CreateEventW QueryDosDeviceW AddAtomA GlobalFindAtomW BuildCommDCBA VirtualProtect GetConsoleProcessList GetTempPathA SetFileAttributesW EncodePointer DecodePointer HeapReAlloc ExitProcess GetModuleHandleExW AreFileApisANSI WideCharToMultiByte GetCommandLineA RaiseException RtlUnwind IsProcessorFeaturePresent IsDebuggerPresent HeapFree HeapAlloc EnterCriticalSection LeaveCriticalSection FlushFileBuffers WriteFile GetConsoleCP GetConsoleMode DeleteCriticalSection HeapSize GetStdHandle GetFileType GetStartupInfoW GetProcessHeap CloseHandle UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW IsValidCodePage GetOEMCP GetCPInfo GetCurrentThreadId GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle SetFilePointerEx LCMapStringW OutputDebugStringW GetStringTypeW CreateFileW SetEndOfFile ReadFile ReadConsoleW

Sharing

General

Malware Config

Signatures

File Explorer

f5dfbe131bee62d14c8ec22d39441965c31a6329ab3a90969116990a39a7e847

kernel32

generic