f21e29a1ab8b032d9bd0af879e3c33d5b82b95dfd8d32e93eee1c1c801ad85c4

General

Target
f21e29a1ab8b032d9bd0af879e3c33d5b82b95dfd8d32e93eee1c1c801ad85c4
Size 308KB
Sample240429-precwsba4w
SHA256 f21e29a1ab8b032d9bd0af879e3c33d5b82b95dfd8d32e93eee1c1c801ad85c4
MD5 a67bd7f7561572171f83b52c30223084
SHA1 ae492d1367a04b88911613300ab44c4f261f2de6
SHA512 00ca0cc38816032820bca91a8d73448501b10db5a16ee86d7e7e7363bd64da9212cee7beb68a32c5844ffed18eb83575291db0ec78a82cafe85dd156c53e4332
SSDEEP 3072:/5yNsLNzpVBsHxP+P+KbLinUMpSOL0U59OuvrERaKGjEhlZRQAHziHE8sI7I8NU:LVnBqqVYrAOIU7RERa/Q1mE8sMNU
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f21e29a1ab8b032d9bd0af879e3c33d5b82b95dfd8d32e93eee1c1c801ad85c4

File Explorer

f21e29a1ab8b032d9bd0af879e3c33d5b82b95dfd8d32e93eee1c1c801ad85c4

.exe 308KB

f21e29a1ab8b032d9bd0af879e3c33d5b82b95dfd8d32e93eee1c1c801ad85c4

IMPHASH f8d3d580c89ab890cee57ed29743eeb7
SHA256 f21e29a1ab8b032d9bd0af879e3c33d5b82b95dfd8d32e93eee1c1c801ad85c4
MD5 a67bd7f7561572171f83b52c30223084
SHA1 ae492d1367a04b88911613300ab44c4f261f2de6
SHA512 00ca0cc38816032820bca91a8d73448501b10db5a16ee86d7e7e7363bd64da9212cee7beb68a32c5844ffed18eb83575291db0ec78a82cafe85dd156c53e4332
SSDEEP 3072:/5yNsLNzpVBsHxP+P+KbLinUMpSOL0U59OuvrERaKGjEhlZRQAHziHE8sI7I8NU:LVnBqqVYrAOIU7RERa/Q1mE8sMNU
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

17282

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\zukiloki20\yupowi_diyosehepuliya-lalovuzawupap79-laxujom.pdb

kernel32

GetSystemDefaultLangID GetComputerNameA GlobalMemoryStatus FindResourceA GetLocaleInfoA CommConfigDialogA LoadLibraryExW InterlockedDecrement CreateHardLinkA BackupSeek GetConsoleAliasesA GetWindowsDirectoryA EnumTimeFormatsA SetCommState GlobalAlloc GetVolumeInformationA LoadLibraryW LocalShrink TerminateThread ReadConsoleInputA CreateEventA WriteConsoleW GetModuleFileNameW GetSystemDirectoryA GetACP MultiByteToWideChar GetLastError SetLastError GetThreadLocale GetProcAddress RemoveDirectoryA InterlockedExchangeAdd SetCalendarInfoW QueryDosDeviceW AddAtomA GlobalFindAtomW BuildCommDCBA VirtualProtect GetVersionExA GetTempPathA SetFileAttributesW EncodePointer DecodePointer HeapReAlloc ExitProcess GetModuleHandleExW AreFileApisANSI WideCharToMultiByte GetCommandLineW RaiseException RtlUnwind IsProcessorFeaturePresent IsDebuggerPresent HeapFree HeapAlloc EnterCriticalSection LeaveCriticalSection FlushFileBuffers WriteFile GetConsoleCP GetConsoleMode DeleteCriticalSection HeapSize GetProcessHeap GetStdHandle GetFileType GetStartupInfoW CloseHandle UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW IsValidCodePage GetOEMCP GetCPInfo GetCurrentThreadId QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle SetFilePointerEx LCMapStringW OutputDebugStringW GetStringTypeW CreateFileW SetEndOfFile ReadFile ReadConsoleW

Sharing

General

Malware Config

Signatures

File Explorer

f21e29a1ab8b032d9bd0af879e3c33d5b82b95dfd8d32e93eee1c1c801ad85c4

kernel32

generic