ae94bcdff4c4db9cd6aaa662d87f6b3bc9b1de7a786156307c42aad4f4d72334

General

Target
ae94bcdff4c4db9cd6aaa662d87f6b3bc9b1de7a786156307c42aad4f4d72334
Size 10.6MB
Sample240510-ev4f3sdg48
SHA256 ae94bcdff4c4db9cd6aaa662d87f6b3bc9b1de7a786156307c42aad4f4d72334
MD5 48d331a22042af3c46f4a5c5852fd973
SHA1 144c9fbab74bfa069d42f895d84cd0573d5e5582
SHA512 64d36047c7e0d92054eac6b44eae05ada08e7fb5febbb5a2ae6b7a07ebdc9bd31ebd0391b490957362d1c3727986591bdcb0598111967c4b94e1b895f8b71026
SSDEEP 6144:CKNDMp7tMWhHwXO3kyvzC0+9XFWYW///////////////////////////////////:CKNDMpOmHKcRv+0u
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ae94bcdff4c4db9cd6aaa662d87f6b3bc9b1de7a786156307c42aad4f4d72334

File Explorer

ae94bcdff4c4db9cd6aaa662d87f6b3bc9b1de7a786156307c42aad4f4d72334

.exe 10.6MB

ae94bcdff4c4db9cd6aaa662d87f6b3bc9b1de7a786156307c42aad4f4d72334

IMPHASH c386e6f16e8bb6e076422de28d279c56
SHA256 ae94bcdff4c4db9cd6aaa662d87f6b3bc9b1de7a786156307c42aad4f4d72334
MD5 48d331a22042af3c46f4a5c5852fd973
SHA1 144c9fbab74bfa069d42f895d84cd0573d5e5582
SHA512 64d36047c7e0d92054eac6b44eae05ada08e7fb5febbb5a2ae6b7a07ebdc9bd31ebd0391b490957362d1c3727986591bdcb0598111967c4b94e1b895f8b71026
SSDEEP 6144:CKNDMp7tMWhHwXO3kyvzC0+9XFWYW///////////////////////////////////:CKNDMpOmHKcRv+0u
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

4272

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\ruzevegumo.pdb

kernel32

CopyFileExW FreeLibrary InterlockedIncrement GetCommState GetProfileStringW CallNamedPipeW GetNumberFormatA FindResourceExA GlobalAlloc GetPrivateProfileIntA GetVolumeInformationA GetSystemWow64DirectoryW GetSystemWindowsDirectoryA HeapDestroy GetCompressedFileSizeA GetSystemDirectoryA CreateActCtxA GetBinaryTypeW LCMapStringA GetStartupInfoA SetThreadLocale GetStdHandle lstrlenA OpenMutexW GetLastError SetLastError GetProcAddress CreateNamedPipeA SearchPathA LoadLibraryA CreateSemaphoreW FindAtomA SetSystemTime GetModuleFileNameA CreateIoCompletionPort FindFirstChangeNotificationA HeapSetInformation FreeEnvironmentStringsW FindNextFileW GetCurrentDirectoryA SetFileShortNameA TerminateJobObject FindAtomW UnregisterWaitEx DeleteFileA GetThreadContext GetCPInfoExW GetCommandLineW GetStartupInfoW InterlockedDecrement DecodePointer GetModuleHandleW ExitProcess TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer GetModuleFileNameW WriteFile QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection HeapValidate IsBadReadPtr TlsAlloc TlsGetValue TlsSetValue TlsFree HeapCreate GetACP GetOEMCP GetCPInfo IsValidCodePage EnterCriticalSection LeaveCriticalSection LoadLibraryW HeapAlloc HeapReAlloc HeapSize HeapQueryInformation HeapFree RtlUnwind WideCharToMultiByte LCMapStringW MultiByteToWideChar GetStringTypeW OutputDebugStringA WriteConsoleW OutputDebugStringW IsProcessorFeaturePresent SetFilePointer GetConsoleCP GetConsoleMode RaiseException SetStdHandle CreateFileW CloseHandle FlushFileBuffers

advapi32

InitiateSystemShutdownA AbortSystemShutdownA

Sharing

General

Malware Config

Signatures

File Explorer

ae94bcdff4c4db9cd6aaa662d87f6b3bc9b1de7a786156307c42aad4f4d72334

kernel32

advapi32

generic