1980919e962abcbe0b147cb4ad24691631d030fe7d716229f2125997bc6c3d42

General

Target
1980919e962abcbe0b147cb4ad24691631d030fe7d716229f2125997bc6c3d42
Size 834KB
Sample240503-yzkpbaec8v
SHA256 1980919e962abcbe0b147cb4ad24691631d030fe7d716229f2125997bc6c3d42
MD5 1199896424e0e4acb0559b6a34b65184
SHA1 78e8a8d94f68baf47b8d28b2623233558c6bee99
SHA512 618d5adb8b66b4b4e4056b41912a1ebb95326e2ec19313b9f11a3fe95b9df235f5557cd494d81126937c13a012399b4e40ad8944ad547e1be808fa8d2501f114
SSDEEP 12288:LxRQRulMpNAxKakx1KyiEI/CflMb+fPBRMkyNCKaV5vki:Y4MpNAxKFSqfGqfPPM9YK4v
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1980919e962abcbe0b147cb4ad24691631d030fe7d716229f2125997bc6c3d42

File Explorer

1980919e962abcbe0b147cb4ad24691631d030fe7d716229f2125997bc6c3d42

.exe 834KB

1980919e962abcbe0b147cb4ad24691631d030fe7d716229f2125997bc6c3d42

IMPHASH 6b4e0740bbcce3713ccc7cf1fea748c4
SHA256 1980919e962abcbe0b147cb4ad24691631d030fe7d716229f2125997bc6c3d42
MD5 1199896424e0e4acb0559b6a34b65184
SHA1 78e8a8d94f68baf47b8d28b2623233558c6bee99
SHA512 618d5adb8b66b4b4e4056b41912a1ebb95326e2ec19313b9f11a3fe95b9df235f5557cd494d81126937c13a012399b4e40ad8944ad547e1be808fa8d2501f114
SSDEEP 12288:LxRQRulMpNAxKakx1KyiEI/CflMb+fPBRMkyNCKaV5vki:Y4MpNAxKFSqfGqfPPM9YK4v
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

15115

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\hefitewigiteb-dovafuxaredubu liwi_tilecotetah35\tex\65 zowu.pdb

kernel32

GetFullPathNameW GlobalMemoryStatus CommConfigDialogA LoadLibraryExW InterlockedIncrement GetConsoleAliasA InterlockedDecrement BackupSeek GetModuleHandleW GetWindowsDirectoryA EnumTimeFormatsA SetCommState GlobalAlloc GetSystemDirectoryW GlobalFindAtomA LoadLibraryW GetLocaleInfoW ReadConsoleInputA CreateEventA GetACP ExitThread MultiByteToWideChar GetConsoleOutputCP GetLastError SetLastError GetProcAddress WriteConsoleA CreateHardLinkW AddAtomW GetModuleFileNameA DebugSetProcessKillOnExit VirtualProtect GetVersionExA GetCurrentProcessId GetTempPathA GetVolumeInformationW LocalFileTimeToFileTime IsProcessorFeaturePresent EncodePointer DecodePointer GetCommandLineW RaiseException RtlUnwind ExitProcess GetModuleHandleExW WideCharToMultiByte IsDebuggerPresent HeapFree HeapAlloc HeapSize EnterCriticalSection LeaveCriticalSection GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW CloseHandle GetCurrentThreadId GetProcessHeap GetModuleFileNameW WriteFile QueryPerformanceCounter GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree IsValidCodePage GetOEMCP GetCPInfo HeapReAlloc LCMapStringW GetConsoleCP GetConsoleMode SetFilePointerEx SetStdHandle FlushFileBuffers OutputDebugStringW GetStringTypeW WriteConsoleW CreateFileW

Sharing

General

Malware Config

Signatures

File Explorer

1980919e962abcbe0b147cb4ad24691631d030fe7d716229f2125997bc6c3d42

kernel32

generic