5a6c067494603d8231e1f58c56abe5542f0bef292274004c37952af6b8e155fb

General

Target
5a6c067494603d8231e1f58c56abe5542f0bef292274004c37952af6b8e155fb
Size 808KB
Sample240503-3pcm6sgf71
SHA256 5a6c067494603d8231e1f58c56abe5542f0bef292274004c37952af6b8e155fb
MD5 58284dd1037b514f642f3e499ea2cbc1
SHA1 2a9f51e2efe67c748c5e1d640a48294c6005aab9
SHA512 5442b44464d5a1491f206739b1c871cbf8ace2ce327b481dcda87822d8627ee7e972544cbb856b305f78662791dcb434a135a5b9f21937a474fae4ca737f49d3
SSDEEP 12288:3QtxwYjb7VcARzySgi3cViMlyMXs2O1gzlt0MVMM+bqK8:Gp3xZCrlNtii3hxI
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a6c067494603d8231e1f58c56abe5542f0bef292274004c37952af6b8e155fb

File Explorer

5a6c067494603d8231e1f58c56abe5542f0bef292274004c37952af6b8e155fb

.exe 808KB

5a6c067494603d8231e1f58c56abe5542f0bef292274004c37952af6b8e155fb

IMPHASH 6b4e0740bbcce3713ccc7cf1fea748c4
SHA256 5a6c067494603d8231e1f58c56abe5542f0bef292274004c37952af6b8e155fb
MD5 58284dd1037b514f642f3e499ea2cbc1
SHA1 2a9f51e2efe67c748c5e1d640a48294c6005aab9
SHA512 5442b44464d5a1491f206739b1c871cbf8ace2ce327b481dcda87822d8627ee7e972544cbb856b305f78662791dcb434a135a5b9f21937a474fae4ca737f49d3
SSDEEP 12288:3QtxwYjb7VcARzySgi3cViMlyMXs2O1gzlt0MVMM+bqK8:Gp3xZCrlNtii3hxI
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

15115

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\jinokunidiy_kexugemax 10\sejudajuwov-joga\21\ravi-wiz.pdb

kernel32

GetFullPathNameW GlobalMemoryStatus CommConfigDialogA LoadLibraryExW InterlockedIncrement GetConsoleAliasA InterlockedDecrement BackupSeek GetModuleHandleW GetWindowsDirectoryA EnumTimeFormatsA SetCommState GlobalAlloc GetSystemDirectoryW GlobalFindAtomA LoadLibraryW GetLocaleInfoW ReadConsoleInputA CreateEventA GetACP ExitThread MultiByteToWideChar GetConsoleOutputCP GetLastError SetLastError GetProcAddress WriteConsoleA CreateHardLinkW AddAtomW GetModuleFileNameA DebugSetProcessKillOnExit VirtualProtect GetVersionExA GetCurrentProcessId GetTempPathA GetVolumeInformationW LocalFileTimeToFileTime IsProcessorFeaturePresent EncodePointer DecodePointer GetCommandLineW RaiseException RtlUnwind ExitProcess GetModuleHandleExW WideCharToMultiByte IsDebuggerPresent HeapFree HeapAlloc HeapSize EnterCriticalSection LeaveCriticalSection GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW CloseHandle GetCurrentThreadId GetProcessHeap GetModuleFileNameW WriteFile QueryPerformanceCounter GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree IsValidCodePage GetOEMCP GetCPInfo HeapReAlloc LCMapStringW GetConsoleCP GetConsoleMode SetFilePointerEx SetStdHandle FlushFileBuffers OutputDebugStringW GetStringTypeW WriteConsoleW CreateFileW

Sharing

General

Malware Config

Signatures

File Explorer

5a6c067494603d8231e1f58c56abe5542f0bef292274004c37952af6b8e155fb

kernel32

generic