db529b54a70304620f85d2ef0e45da9913caa69db6e61b336e4e388b7389bd7d

General

Target
db529b54a70304620f85d2ef0e45da9913caa69db6e61b336e4e388b7389bd7d
Size 762KB
Sample240502-fmf69abe74
SHA256 db529b54a70304620f85d2ef0e45da9913caa69db6e61b336e4e388b7389bd7d
MD5 991d2a3d342b7830c7c53146c6684050
SHA1 4b96ffe3a3151416c67c86e2b97a4c9a20adea90
SHA512 45bbffe2d43bf004b6878d219cd63b596f4749728526eb4a3384a67939bdef910f51b362d3a47aadbc5a5db02a1d12796c4617aa2af9be632071477ac7490f37
SSDEEP 12288:RZU/atFcwl7aR3PjWtIQSujujHNp7NfOSlJGrZ8RbmjdAjPG6Hui8w0EVhlG9V0N:vcwlOESmmtppwreRqjdnwThlGwN
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
db529b54a70304620f85d2ef0e45da9913caa69db6e61b336e4e388b7389bd7d

File Explorer

db529b54a70304620f85d2ef0e45da9913caa69db6e61b336e4e388b7389bd7d

.exe 762KB

db529b54a70304620f85d2ef0e45da9913caa69db6e61b336e4e388b7389bd7d

IMPHASH 34da3f563ddf1a89e7cb4eb5b1c22516
SHA256 db529b54a70304620f85d2ef0e45da9913caa69db6e61b336e4e388b7389bd7d
MD5 991d2a3d342b7830c7c53146c6684050
SHA1 4b96ffe3a3151416c67c86e2b97a4c9a20adea90
SHA512 45bbffe2d43bf004b6878d219cd63b596f4749728526eb4a3384a67939bdef910f51b362d3a47aadbc5a5db02a1d12796c4617aa2af9be632071477ac7490f37
SSDEEP 12288:RZU/atFcwl7aR3PjWtIQSujujHNp7NfOSlJGrZ8RbmjdAjPG6Hui8w0EVhlG9V0N:vcwlOESmmtppwreRqjdnwThlGwN
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

16244

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\hujehilaged\hipapilop.pdb

kernel32

CommConfigDialogA LoadLibraryExW InterlockedIncrement InterlockedDecrement BackupSeek GetWindowsDirectoryA EnumTimeFormatsA SetCommState GlobalAlloc LoadLibraryW TerminateThread GetLocaleInfoW GetConsoleAliasW WriteConsoleW GetModuleFileNameW GetSystemDirectoryA GetACP MultiByteToWideChar GetFullPathNameA GetConsoleOutputCP GetLastError SetLastError GetProcAddress LoadLibraryA CreateHardLinkW CreateEventW AddAtomA SetCommMask GlobalFindAtomW GlobalUnWire BuildCommDCBA VirtualProtect GetVersionExA ReadConsoleInputW SetFileAttributesW GetVolumeInformationW GetTempPathW GetComputerNameA EncodePointer DecodePointer ExitProcess GetModuleHandleExW WideCharToMultiByte GetCommandLineW RaiseException RtlUnwind IsProcessorFeaturePresent IsDebuggerPresent HeapFree HeapAlloc HeapSize EnterCriticalSection LeaveCriticalSection GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW CloseHandle UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW WriteFile IsValidCodePage GetOEMCP GetCPInfo GetCurrentThreadId GetProcessHeap QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW HeapReAlloc LCMapStringW GetConsoleCP GetConsoleMode SetFilePointerEx SetStdHandle FlushFileBuffers OutputDebugStringW GetStringTypeW CreateFileW

gdi32

DeleteMetaFile

Sharing

General

Malware Config

Signatures

File Explorer

db529b54a70304620f85d2ef0e45da9913caa69db6e61b336e4e388b7389bd7d

kernel32

gdi32

generic