1ab057993643c2e81d7d915cf1431e4ff0ca62270e5e823db7f4ae12f06b5faf

General

Target
1ab057993643c2e81d7d915cf1431e4ff0ca62270e5e823db7f4ae12f06b5faf
Size 415KB
Sample240502-hvcvxabh4v
SHA256 1ab057993643c2e81d7d915cf1431e4ff0ca62270e5e823db7f4ae12f06b5faf
MD5 c6c872f18b13e75801373bcf99464a84
SHA1 71a97c9b47a8b2a21649d9309183ef4ea1f3f7c2
SHA512 448b900ec5e38b851eb5ccb5094722a96144211e69f345a18f42307d67d5beae6f273b51ddbb053735273d038577e9b0a4aeea377971c23d3e092de056ed0e94
SSDEEP 6144:dTxiAqKZFddqy2QZAKjoSAgqEE761ZkyKc9/ifLGmQhQ74Z/j/:dFiAViQAKjoSAgqUvZdiKmQJb/
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1ab057993643c2e81d7d915cf1431e4ff0ca62270e5e823db7f4ae12f06b5faf

File Explorer

1ab057993643c2e81d7d915cf1431e4ff0ca62270e5e823db7f4ae12f06b5faf

.exe 415KB

1ab057993643c2e81d7d915cf1431e4ff0ca62270e5e823db7f4ae12f06b5faf

IMPHASH e192e24990773dcb955dc12831abae87
SHA256 1ab057993643c2e81d7d915cf1431e4ff0ca62270e5e823db7f4ae12f06b5faf
MD5 c6c872f18b13e75801373bcf99464a84
SHA1 71a97c9b47a8b2a21649d9309183ef4ea1f3f7c2
SHA512 448b900ec5e38b851eb5ccb5094722a96144211e69f345a18f42307d67d5beae6f273b51ddbb053735273d038577e9b0a4aeea377971c23d3e092de056ed0e94
SSDEEP 6144:dTxiAqKZFddqy2QZAKjoSAgqEE761ZkyKc9/ifLGmQhQ74Z/j/:dFiAViQAKjoSAgqUvZdiKmQJb/
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

16244

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\riranux\jasihomey\22\kula.pdb

kernel32

CommConfigDialogA LoadLibraryExW InterlockedIncrement InterlockedDecrement BackupSeek GetWindowsDirectoryA EnumTimeFormatsA SetCommState GlobalAlloc LoadLibraryW TerminateThread GetLocaleInfoW GetConsoleAliasW WriteConsoleW GetModuleFileNameW GetSystemDirectoryA GetACP MultiByteToWideChar GetFullPathNameA GetConsoleOutputCP GetLastError SetLastError GetProcAddress LoadLibraryA CreateHardLinkW CreateEventW AddAtomA GlobalFindAtomW GlobalUnWire BuildCommDCBA VirtualProtect GetVersionExA ReadConsoleInputW GetCurrentProcessId SetFileAttributesW GetVolumeInformationW GetTempPathW GetComputerNameA EncodePointer DecodePointer ExitProcess GetModuleHandleExW WideCharToMultiByte GetCommandLineW RaiseException RtlUnwind IsProcessorFeaturePresent IsDebuggerPresent HeapFree HeapAlloc HeapSize EnterCriticalSection LeaveCriticalSection GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW CloseHandle UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW WriteFile IsValidCodePage GetOEMCP GetCPInfo GetCurrentThreadId GetProcessHeap QueryPerformanceCounter GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW HeapReAlloc LCMapStringW GetConsoleCP GetConsoleMode SetFilePointerEx SetStdHandle FlushFileBuffers OutputDebugStringW GetStringTypeW CreateFileW

gdi32

DeleteMetaFile

Sharing

General

Malware Config

Signatures

File Explorer

1ab057993643c2e81d7d915cf1431e4ff0ca62270e5e823db7f4ae12f06b5faf

kernel32

gdi32

generic