y8vuadjl6[.]jpg[.]malware

General

Target
y8vuadjl6.jpg.malware
Size 664KB
Sample240506-v2fllabf8v
SHA256 b3d39d279e1741d4d8d808e028ebac9057308c6555b18426cfcb43d7c3bb7010
MD5 1205fb909fa4296198f238397d1be1dd
SHA1 b521307713c2c53921ce34591d6efbdffd6a2769
SHA512 36c78c85cab27c5cde24acb8f7208b535e511f71a4b1342499984b57c2eb72426d3aee12b065c884a22e02c3d709040bf861003d5ef32eec0843061488a8ecd7
SSDEEP 12288:z/0Qzqf0eOi48HM+6TFKywVt6PbEYU0eyJTT/Mu9oV01uLoaEP:r0zhO0n6TFKywvCbEOxDMu9oypaEP
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
y8vuadjl6.jpg.malware

File Explorer

y8vuadjl6.jpg.malware

.dll 664KB

y8vuadjl6.jpg.malware

IMPHASH 575d942b23dfcc476865145b0dd6ee57
SHA256 b3d39d279e1741d4d8d808e028ebac9057308c6555b18426cfcb43d7c3bb7010
MD5 1205fb909fa4296198f238397d1be1dd
SHA1 b521307713c2c53921ce34591d6efbdffd6a2769
SHA512 36c78c85cab27c5cde24acb8f7208b535e511f71a4b1342499984b57c2eb72426d3aee12b065c884a22e02c3d709040bf861003d5ef32eec0843061488a8ecd7
SSDEEP 12288:z/0Qzqf0eOi48HM+6TFKywVt6PbEYU0eyJTT/Mu9oV01uLoaEP:r0zhO0n6TFKywvCbEOxDMu9oypaEP
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

119221

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\32\Space-Occur\348\Liquid\like.pdb

kernel32

FlushFileBuffers LocalFree LocalAlloc CreateDirectoryW CopyFileW ResetEvent VirtualAlloc VirtualFree VirtualProtect GetCurrentDirectoryW GetModuleFileNameW GetEnvironmentVariableW CreateSemaphoreW SetConsoleOutputCP CompareStringW CompareStringA GetTimeZoneInformation GetLocaleInfoW HeapSize SetEndOfFile IsValidCodePage IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID GetDateFormatA GetTimeFormatA GetStringTypeW GetStringTypeA LCMapStringW LCMapStringA LoadLibraryA InterlockedExchange GetCurrentThreadId GetCommandLineA HeapFree GetVersionExA HeapAlloc GetProcessHeap EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode CloseHandle RtlUnwind GetProcAddress GetModuleHandleA ExitProcess TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError InterlockedDecrement GetCurrentThread Sleep GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW HeapDestroy HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime FatalAppExitA MultiByteToWideChar ReadFile InitializeCriticalSection GetCPInfo GetACP GetOEMCP SetFilePointer WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle HeapReAlloc CreateFileA SetConsoleCtrlHandler FreeLibrary SetEnvironmentVariableA

user32

SetParent IntersectRect EndDeferWindowPos ExitWindowsEx InflateRect

psapi

EnumProcesses EmptyWorkingSet EnumProcessModules EnumDeviceDrivers GetModuleInformation GetMappedFileNameW GetDeviceDriverFileNameW GetPerformanceInfo GetModuleFileNameExW GetModuleBaseNameW GetDeviceDriverBaseNameW EnumPageFilesW

Sharing