wiui4d6ph[.]zip[.]malware

General

Target
wiui4d6ph.zip.malware
Size 664KB
Sample240506-v2bmmsbf7x
SHA256 a095a17954dbbb6fc024c83f689abfe069745b1c006463524263f091a31a0f6a
MD5 53e58e3a8798fd076d02adc2ce902bbb
SHA1 19a3ae4067f3272dd83a2363856d46790233dca4
SHA512 cf0b3e04347530c01fb6bc85b1eafd7cd7442abd8fc8d47ca4a40f8746842cc9a5ee508a0c5faa4e2c2834d9c33f164473e8fc98241cfd0a9ad8be0cbab1e018
SSDEEP 12288:d/0Qzqf0e5i48JM+6TFKywVt6PbEYU0eyJTT/Mu9oV01u1oaEP:t0zh56n6TFKywvCbEOxDMu9oyPaEP
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
wiui4d6ph.zip.malware

File Explorer

wiui4d6ph.zip.malware

.dll 664KB

wiui4d6ph.zip.malware

IMPHASH 575d942b23dfcc476865145b0dd6ee57
SHA256 a095a17954dbbb6fc024c83f689abfe069745b1c006463524263f091a31a0f6a
MD5 53e58e3a8798fd076d02adc2ce902bbb
SHA1 19a3ae4067f3272dd83a2363856d46790233dca4
SHA512 cf0b3e04347530c01fb6bc85b1eafd7cd7442abd8fc8d47ca4a40f8746842cc9a5ee508a0c5faa4e2c2834d9c33f164473e8fc98241cfd0a9ad8be0cbab1e018
SSDEEP 12288:d/0Qzqf0e5i48JM+6TFKywVt6PbEYU0eyJTT/Mu9oV01u1oaEP:t0zh56n6TFKywvCbEOxDMu9oyPaEP
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

119221

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\32\Space-Occur\348\Liquid\like.pdb

kernel32

FlushFileBuffers LocalFree LocalAlloc CreateDirectoryW CopyFileW ResetEvent VirtualAlloc VirtualFree VirtualProtect GetCurrentDirectoryW GetModuleFileNameW GetEnvironmentVariableW CreateSemaphoreW SetConsoleOutputCP CompareStringW CompareStringA GetTimeZoneInformation GetLocaleInfoW HeapSize SetEndOfFile IsValidCodePage IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID GetDateFormatA GetTimeFormatA GetStringTypeW GetStringTypeA LCMapStringW LCMapStringA LoadLibraryA InterlockedExchange GetCurrentThreadId GetCommandLineA HeapFree GetVersionExA HeapAlloc GetProcessHeap EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode CloseHandle RtlUnwind GetProcAddress GetModuleHandleA ExitProcess TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError InterlockedDecrement GetCurrentThread Sleep GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW HeapDestroy HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime FatalAppExitA MultiByteToWideChar ReadFile InitializeCriticalSection GetCPInfo GetACP GetOEMCP SetFilePointer WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle HeapReAlloc CreateFileA SetConsoleCtrlHandler FreeLibrary SetEnvironmentVariableA

user32

SetParent IntersectRect EndDeferWindowPos ExitWindowsEx InflateRect

psapi

EnumProcesses EmptyWorkingSet EnumProcessModules EnumDeviceDrivers GetModuleInformation GetMappedFileNameW GetDeviceDriverFileNameW GetPerformanceInfo GetModuleFileNameExW GetModuleBaseNameW GetDeviceDriverBaseNameW EnumPageFilesW

Sharing