917b3549188a94defbd99a0ac7a730ce3f6ad0de550206cbeda6ffeb8e6e634a

General

Target
917b3549188a94defbd99a0ac7a730ce3f6ad0de550206cbeda6ffeb8e6e634a
Size 818KB
Sample240509-27n89ace2y
SHA256 917b3549188a94defbd99a0ac7a730ce3f6ad0de550206cbeda6ffeb8e6e634a
MD5 a0e214068a05c7bcb9b7dc3882ae11fc
SHA1 0e2f33a7cb123a043fbfbbf06f4c3674f6b102a9
SHA512 683d3f5327112836e8f88cb8def047c17fb61b8c776ca216f267a25694e373e92a782a4b0b931f294b099fd3b5c1fff4b3da8373e4ae2018cbd361bfb9da09e8
SSDEEP 12288:KbLRA0V/1O3xHV/KwI2GOBwt+0Lh2AFNQs1GcPxnb/aIjsK0:w1O3VtKwnwvl2AFNQGZnb
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
917b3549188a94defbd99a0ac7a730ce3f6ad0de550206cbeda6ffeb8e6e634a

File Explorer

917b3549188a94defbd99a0ac7a730ce3f6ad0de550206cbeda6ffeb8e6e634a

.exe 818KB

917b3549188a94defbd99a0ac7a730ce3f6ad0de550206cbeda6ffeb8e6e634a

IMPHASH eb0ad2aab504500c82caaa360359aef5
SHA256 917b3549188a94defbd99a0ac7a730ce3f6ad0de550206cbeda6ffeb8e6e634a
MD5 a0e214068a05c7bcb9b7dc3882ae11fc
SHA1 0e2f33a7cb123a043fbfbbf06f4c3674f6b102a9
SHA512 683d3f5327112836e8f88cb8def047c17fb61b8c776ca216f267a25694e373e92a782a4b0b931f294b099fd3b5c1fff4b3da8373e4ae2018cbd361bfb9da09e8
SSDEEP 12288:KbLRA0V/1O3xHV/KwI2GOBwt+0Lh2AFNQs1GcPxnb/aIjsK0:w1O3VtKwnwvl2AFNQGZnb
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

16785

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\kedarisugi\wezoput.pdb

kernel32

GetFullPathNameW GlobalMemoryStatus CommConfigDialogA LoadLibraryExW InterlockedIncrement GetConsoleAliasA InterlockedDecrement BackupSeek GetModuleHandleW GetWindowsDirectoryA EnumTimeFormatsA SetCommState GlobalAlloc GetSystemDirectoryW GlobalFindAtomA LoadLibraryW GetLocaleInfoW ReadConsoleInputA CreateEventA GetACP ExitThread MultiByteToWideChar GetConsoleOutputCP GetLastError SetLastError GetProcAddress WriteConsoleA CreateHardLinkW AddAtomA GetModuleFileNameA DebugSetProcessKillOnExit VirtualProtect GetVersionExA GetCurrentProcessId GetTempPathA GetVolumeInformationW LocalFileTimeToFileTime CloseHandle WriteConsoleW EncodePointer DecodePointer IsProcessorFeaturePresent GetCommandLineW RaiseException RtlUnwind HeapFree HeapAlloc ExitProcess GetModuleHandleExW WideCharToMultiByte HeapSize IsDebuggerPresent EnterCriticalSection LeaveCriticalSection ReadFile GetConsoleMode ReadConsoleW GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW SetFilePointerEx GetCurrentThreadId GetProcessHeap GetModuleFileNameW WriteFile QueryPerformanceCounter GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree IsValidCodePage GetOEMCP GetCPInfo HeapReAlloc SetStdHandle LCMapStringW GetConsoleCP FlushFileBuffers OutputDebugStringW GetStringTypeW CreateFileW

user32

ChangeMenuA

Sharing

General

Malware Config

Signatures

File Explorer

917b3549188a94defbd99a0ac7a730ce3f6ad0de550206cbeda6ffeb8e6e634a

kernel32

user32

generic