91dc4b26bb97d42892b1cd316a3847bf1358eced43e5b39a4ac0c0d2d0c114a0

General

Target
91dc4b26bb97d42892b1cd316a3847bf1358eced43e5b39a4ac0c0d2d0c114a0
Size 431KB
Sample240501-3ffy8scd53
SHA256 91dc4b26bb97d42892b1cd316a3847bf1358eced43e5b39a4ac0c0d2d0c114a0
MD5 092cc00194cf8b30b71f9e14a5cde9b6
SHA1 880085f707d7a7fcaa6cb1a61aaba6ed17e6013b
SHA512 eedf36fef779c8e8c9c43eac1072fdbe9cd037aa6a600a231a5349b6bae14afb27388d7d81c85012e36d4cfff96ece584c4e73fffefb93e51f9b8c4d4b2a38e9
SSDEEP 12288:FiJmkAC1wKXfuGRen+MkNDbfs+uR6/N40K:Hk2quGRO+MkNDg+uR6/u0
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
91dc4b26bb97d42892b1cd316a3847bf1358eced43e5b39a4ac0c0d2d0c114a0

File Explorer

91dc4b26bb97d42892b1cd316a3847bf1358eced43e5b39a4ac0c0d2d0c114a0

.exe 431KB

91dc4b26bb97d42892b1cd316a3847bf1358eced43e5b39a4ac0c0d2d0c114a0

IMPHASH 7b429a3347fd898e799116b6973c5111
SHA256 91dc4b26bb97d42892b1cd316a3847bf1358eced43e5b39a4ac0c0d2d0c114a0
MD5 092cc00194cf8b30b71f9e14a5cde9b6
SHA1 880085f707d7a7fcaa6cb1a61aaba6ed17e6013b
SHA512 eedf36fef779c8e8c9c43eac1072fdbe9cd037aa6a600a231a5349b6bae14afb27388d7d81c85012e36d4cfff96ece584c4e73fffefb93e51f9b8c4d4b2a38e9
SSDEEP 12288:FiJmkAC1wKXfuGRen+MkNDbfs+uR6/N40K:Hk2quGRO+MkNDg+uR6/u0
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

16642

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\nezudavoxuyel-61\padij\piw.pdb

kernel32

GetSystemDefaultLangID GlobalMemoryStatus FindResourceA GetLocaleInfoA LoadLibraryExW InterlockedDecrement GetComputerNameW GetSystemDefaultLCID BackupSeek GetConsoleAliasesA GetWindowsDirectoryA EnumTimeFormatsW SetCommState GlobalAlloc GetVolumeInformationA LoadLibraryW LocalShrink TerminateThread ReadConsoleInputA WriteConsoleW GetModuleFileNameW GetACP MultiByteToWideChar GetLastError ChangeTimerQueueTimer SetLastError GetThreadLocale GetProcAddress RemoveDirectoryA SetFileAttributesA LoadLibraryA SetCalendarInfoW CreateHardLinkW CreateEventW QueryDosDeviceW AddAtomA GlobalFindAtomW BuildCommDCBA VirtualProtect GetConsoleProcessList GetTempPathA EncodePointer DecodePointer HeapReAlloc ExitProcess GetModuleHandleExW AreFileApisANSI WideCharToMultiByte GetCommandLineA RaiseException RtlUnwind IsProcessorFeaturePresent IsDebuggerPresent HeapFree HeapAlloc EnterCriticalSection LeaveCriticalSection FlushFileBuffers WriteFile GetConsoleCP GetConsoleMode DeleteCriticalSection HeapSize GetStdHandle GetFileType GetStartupInfoW GetProcessHeap CloseHandle UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW IsValidCodePage GetOEMCP GetCPInfo GetCurrentThreadId GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle SetFilePointerEx LCMapStringW OutputDebugStringW GetStringTypeW CreateFileW SetEndOfFile ReadFile ReadConsoleW

Sharing

General

Malware Config

Signatures

File Explorer

91dc4b26bb97d42892b1cd316a3847bf1358eced43e5b39a4ac0c0d2d0c114a0

kernel32

generic