22250e38ccca148362616bff926c5f6f87f405b1d340682c2d5e2f515168b073

General

Target
22250e38ccca148362616bff926c5f6f87f405b1d340682c2d5e2f515168b073
Size 318KB
Sample240505-2b89jsag26
SHA256 22250e38ccca148362616bff926c5f6f87f405b1d340682c2d5e2f515168b073
MD5 d65b158a6ef38f93e8596470e3f086b4
SHA1 3b1404af57c344ee91305408a1fdaf97cba9311e
SHA512 b5b0688a92d1cd7cf5e320a9b9a8387c508898f37ece3eec3a0c23876edb35acc871bd3056b4decd789430a1b09911337488b0faa35b9dc1ae777f32bf79ce3d
SSDEEP 3072:ESNbAVPZlpIQMlo3lTV+WxuCdzt3BBgsQgyIXWlF7q6JoKnvS0rH615/jaVSMFuL:cbhMWVVZtRyzgLXY7q6JoKta18VSiK0
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
22250e38ccca148362616bff926c5f6f87f405b1d340682c2d5e2f515168b073

File Explorer

22250e38ccca148362616bff926c5f6f87f405b1d340682c2d5e2f515168b073

.exe 318KB

22250e38ccca148362616bff926c5f6f87f405b1d340682c2d5e2f515168b073

IMPHASH eb0ad2aab504500c82caaa360359aef5
SHA256 22250e38ccca148362616bff926c5f6f87f405b1d340682c2d5e2f515168b073
MD5 d65b158a6ef38f93e8596470e3f086b4
SHA1 3b1404af57c344ee91305408a1fdaf97cba9311e
SHA512 b5b0688a92d1cd7cf5e320a9b9a8387c508898f37ece3eec3a0c23876edb35acc871bd3056b4decd789430a1b09911337488b0faa35b9dc1ae777f32bf79ce3d
SSDEEP 3072:ESNbAVPZlpIQMlo3lTV+WxuCdzt3BBgsQgyIXWlF7q6JoKnvS0rH615/jaVSMFuL:cbhMWVVZtRyzgLXY7q6JoKta18VSiK0
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

16785

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\cucisejuyecir bok\macogutoza11 t.pdb

kernel32

GetFullPathNameW GlobalMemoryStatus CommConfigDialogA LoadLibraryExW InterlockedIncrement GetConsoleAliasA InterlockedDecrement BackupSeek GetModuleHandleW GetWindowsDirectoryA EnumTimeFormatsA SetCommState GlobalAlloc GetSystemDirectoryW GlobalFindAtomA LoadLibraryW GetLocaleInfoW ReadConsoleInputA CreateEventA GetACP ExitThread MultiByteToWideChar GetConsoleOutputCP GetLastError SetLastError GetProcAddress WriteConsoleA CreateHardLinkW AddAtomA GetModuleFileNameA DebugSetProcessKillOnExit VirtualProtect GetVersionExA GetCurrentProcessId GetTempPathA GetVolumeInformationW LocalFileTimeToFileTime CloseHandle WriteConsoleW EncodePointer DecodePointer IsProcessorFeaturePresent GetCommandLineW RaiseException RtlUnwind HeapFree HeapAlloc ExitProcess GetModuleHandleExW WideCharToMultiByte HeapSize IsDebuggerPresent EnterCriticalSection LeaveCriticalSection ReadFile GetConsoleMode ReadConsoleW GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW SetFilePointerEx GetCurrentThreadId GetProcessHeap GetModuleFileNameW WriteFile QueryPerformanceCounter GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree IsValidCodePage GetOEMCP GetCPInfo HeapReAlloc SetStdHandle LCMapStringW GetConsoleCP FlushFileBuffers OutputDebugStringW GetStringTypeW CreateFileW

user32

ChangeMenuA

Sharing

General

Malware Config

Signatures

File Explorer

22250e38ccca148362616bff926c5f6f87f405b1d340682c2d5e2f515168b073

kernel32

user32

generic