F8DB10513DB12A4BB861D7B1F52E56F5DE5F5DBA7614FDEE3DB67B191FEE85C6[.]exe

General

Target
F8DB10513DB12A4BB861D7B1F52E56F5DE5F5DBA7614FDEE3DB67B191FEE85C6.exe
Size 789KB
Sample240724-29hjgsshpm
SHA256 72f533453a36b4608bb4ccd6a8d534fcb05d7d51a55420b546defae752774221
MD5 4748d9904e0eaefdd79c1dc4c5142be1
SHA1 7f05ee2976314962e6ae088be53d0b78f8d71248
SHA512 c175ee64ec1ae67d27939c0a256d9a4102fd0544880f5886e2dbd649c6e618b9587357631e4fdfa47e3f671c7ad7cc2c850e7b044b0bcf1489ea9b21cd0ce598
SSDEEP 24576:kOKcWcrZrvXxgYBV6qBi9oE/MfNzf4NSNoC/T:zrvXyYBMqBTEEfwS2
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
F8DB10513DB12A4BB861D7B1F52E56F5DE5F5DBA7614FDEE3DB67B191FEE85C6.exe

File Explorer

F8DB10513DB12A4BB861D7B1F52E56F5DE5F5DBA7614FDEE3DB67B191FEE85C6.exe

.exe 789KB

F8DB10513DB12A4BB861D7B1F52E56F5DE5F5DBA7614FDEE3DB67B191FEE85C6.exe

IMPHASH e22fde80595c4bea0880fd6845018d6a
SHA256 72f533453a36b4608bb4ccd6a8d534fcb05d7d51a55420b546defae752774221
MD5 4748d9904e0eaefdd79c1dc4c5142be1
SHA1 7f05ee2976314962e6ae088be53d0b78f8d71248
SHA512 c175ee64ec1ae67d27939c0a256d9a4102fd0544880f5886e2dbd649c6e618b9587357631e4fdfa47e3f671c7ad7cc2c850e7b044b0bcf1489ea9b21cd0ce598
SSDEEP 24576:kOKcWcrZrvXxgYBV6qBi9oE/MfNzf4NSNoC/T:zrvXyYBMqBTEEfwS2
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

970752

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\kunahicahe\37\tumuzuzit41 kitijab_hupi\xigu.pdb

kernel32

LoadLibraryA CreateMutexW SetLocaleInfoW FindNextVolumeW GetNamedPipeHandleStateA LocalFileTimeToFileTime EnumResourceTypesW EnumResourceNamesW FillConsoleOutputCharacterA CreateTimerQueueTimer TerminateProcess SetEvent FindNextFileW GetCompressedFileSizeA CopyFileExW BuildCommDCBW VerifyVersionInfoA FreeResource SetLastError GetVersionExA ReadConsoleOutputCharacterA SetDefaultCommConfigW VerLanguageNameW GetCommConfig WritePrivateProfileStructW LocalFree CreateTimerQueue FindNextVolumeMountPointA ResetWriteWatch WriteConsoleInputA LoadResource AddAtomW InitAtomTable GetThreadPriority CallNamedPipeW GetDriveTypeW BuildCommDCBAndTimeoutsA VirtualProtect GlobalAlloc VerifyVersionInfoW InterlockedExchange FindFirstChangeNotificationW SearchPathW FormatMessageW SetDllDirectoryW GetModuleHandleA WritePrivateProfileStringA GetUserDefaultLCID TerminateThread GlobalUnfix SetConsoleWindowInfo InterlockedDecrement GetStartupInfoA GetSystemWow64DirectoryW CopyFileA GetPrivateProfileIntA SetCalendarInfoW DebugBreak SetConsoleCursorInfo FreeLibraryAndExitThread GetModuleFileNameA SetConsoleScreenBufferSize WaitForDebugEvent InterlockedExchangeAdd GetOEMCP GetPrivateProfileStringW CreateActCtxA GetPrivateProfileIntW ReadConsoleInputW OutputDebugStringW SetThreadAffinityMask FlushConsoleInputBuffer lstrlenA WriteConsoleW OpenMutexW GetThreadContext DeleteCriticalSection QueryDepthSList ConvertFiberToThread SetProcessPriorityBoost LockFile FreeEnvironmentStringsA GetConsoleCP CreateIoCompletionPort AllocConsole GlobalGetAtomNameW SetComputerNameA GetConsoleAliasExesLengthA CreateMailslotW GetCommState MoveFileWithProgressW GetSystemTimeAdjustment EnumSystemLocalesA GetLastError WriteProfileStringA OpenMutexA OpenWaitableTimerW OpenFileMappingW GetFileSizeEx GetConsoleAliasesLengthW SetProcessShutdownParameters FillConsoleOutputCharacterW WriteConsoleOutputCharacterA GetNumberFormatA BuildCommDCBAndTimeoutsW GetConsoleAliasExesA GetBinaryTypeW GetModuleHandleW Sleep InterlockedIncrement GetProcAddress ExitProcess MoveFileA DeleteFileA RaiseException GetStartupInfoW HeapValidate IsBadReadPtr EnterCriticalSection LeaveCriticalSection GetModuleFileNameW TlsGetValue TlsAlloc TlsSetValue GetCurrentThreadId TlsFree WriteFile GetStdHandle GetACP GetCPInfo IsValidCodePage GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapDestroy HeapCreate HeapFree VirtualFree HeapAlloc HeapSize HeapReAlloc VirtualAlloc RtlUnwind OutputDebugStringA LoadLibraryW WideCharToMultiByte MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetFilePointer GetConsoleMode FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP CloseHandle CreateFileA

user32

CharUpperW

Sharing