xeamfe0p7[.]jpg[.]malware

General

Target
xeamfe0p7.jpg.malware
Size 664KB
Sample240506-v2epasbf8t
SHA256 5a88d1900129852526c896bec4055db283372e80c9fed1906bf8ced25729e86a
MD5 6f4d3fe1df77dea5ecca8eb2f98e4479
SHA1 df265d1b432f1cd6e41ddd55661711abc3032fd3
SHA512 9cd209d038299ca5b1c24d2a7d04b7057caa87f593fc8b369e8a51e45f23a9aefbfbe42922fa3e7a0d853869ccbe09f326a40dee262e05b645a20299ed771877
SSDEEP 12288:B/0Qzqf0eWi48uM+6TFKywVt6PbEYU0eyJTT/Mu9oV01uYoaEP:B0zhWhn6TFKywvCbEOxDMu9oyMaEP
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
xeamfe0p7.jpg.malware

File Explorer

xeamfe0p7.jpg.malware

.dll 664KB

xeamfe0p7.jpg.malware

IMPHASH 4f594b3d8de797f24127c3ffc3b6f80b
SHA256 5a88d1900129852526c896bec4055db283372e80c9fed1906bf8ced25729e86a
MD5 6f4d3fe1df77dea5ecca8eb2f98e4479
SHA1 df265d1b432f1cd6e41ddd55661711abc3032fd3
SHA512 9cd209d038299ca5b1c24d2a7d04b7057caa87f593fc8b369e8a51e45f23a9aefbfbe42922fa3e7a0d853869ccbe09f326a40dee262e05b645a20299ed771877
SSDEEP 12288:B/0Qzqf0eWi48uM+6TFKywVt6PbEYU0eyJTT/Mu9oV01uYoaEP:B0zhWhn6TFKywvCbEOxDMu9oyMaEP
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

119221

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\32\Space-Occur\348\Liquid\like.pdb

kernel32

FlushFileBuffers LocalFree LocalAlloc CreateDirectoryW CopyFileW ResetEvent VirtualAlloc VirtualFree VirtualProtect GetCurrentDirectoryW GetModuleFileNameW GetEnvironmentVariableW CreateSemaphoreW SetConsoleOutputCP CompareStringW CompareStringA GetTimeZoneInformation GetLocaleInfoW HeapSize SetEndOfFile IsValidCodePage IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID GetDateFormatA GetTimeFormatA GetStringTypeW GetStringTypeA LCMapStringW LCMapStringA LoadLibraryA InterlockedExchange GetCurrentThreadId GetCommandLineA HeapFree GetVersionExA HeapAlloc GetProcessHeap EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode CloseHandle RtlUnwind GetProcAddress GetModuleHandleA ExitProcess TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError InterlockedDecrement GetCurrentThread Sleep GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW HeapDestroy HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime FatalAppExitA MultiByteToWideChar ReadFile InitializeCriticalSection GetCPInfo GetACP GetOEMCP SetFilePointer WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle HeapReAlloc CreateFileA SetConsoleCtrlHandler FreeLibrary SetEnvironmentVariableA

user32

InflateRect SetParent ExitWindowsEx IntersectRect EndDeferWindowPos

psapi

EmptyWorkingSet EnumDeviceDrivers EnumPageFilesW EnumProcessModules EnumProcesses GetDeviceDriverBaseNameW GetDeviceDriverFileNameW GetMappedFileNameW GetModuleBaseNameW GetModuleFileNameExW GetModuleInformation GetPerformanceInfo

Sharing