12559AF5C2C626B4E492751A8235076667926D41D6A29D1792E8CE65164FC42C[.]exe

General

Target
12559AF5C2C626B4E492751A8235076667926D41D6A29D1792E8CE65164FC42C.exe
Size 825KB
Sample240724-nja5tstfml
SHA256 bf771de1c2a064ca7acf4cecbeeb6a4f23895befc680a76747f8a7c7c7c3d80c
MD5 af65ccf76bb0453e85a1019150294bec
SHA1 c1b2d8ee90d3d08986f3bf77cca9d4c7448d9667
SHA512 1581fe49155c0f148748bffeec008124c3959cb03e49e186f8d4888b10f87b6e2f3f54ffceb6740682097d2471fba4e639b29719941975bdc1de598a739909ed
SSDEEP 12288:VzedirmqkssQkACWe52If6Yli2ZuYr1yRqz2e+6MUcfPDHYe1IO7151N/BGg9:VzrmsB5zIS81oAv+6MtPD4eiOztp9
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12559AF5C2C626B4E492751A8235076667926D41D6A29D1792E8CE65164FC42C.exe

File Explorer

12559AF5C2C626B4E492751A8235076667926D41D6A29D1792E8CE65164FC42C.exe

.exe 825KB

12559AF5C2C626B4E492751A8235076667926D41D6A29D1792E8CE65164FC42C.exe

IMPHASH fe3b174fa1083151aea39118cb091acc
SHA256 bf771de1c2a064ca7acf4cecbeeb6a4f23895befc680a76747f8a7c7c7c3d80c
MD5 af65ccf76bb0453e85a1019150294bec
SHA1 c1b2d8ee90d3d08986f3bf77cca9d4c7448d9667
SHA512 1581fe49155c0f148748bffeec008124c3959cb03e49e186f8d4888b10f87b6e2f3f54ffceb6740682097d2471fba4e639b29719941975bdc1de598a739909ed
SSDEEP 12288:VzedirmqkssQkACWe52If6Yli2ZuYr1yRqz2e+6MUcfPDHYe1IO7151N/BGg9:VzrmsB5zIS81oAv+6MtPD4eiOztp9
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

1024000

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\woxisamuyedol\zadabik\jopu\vakaya.pdb

kernel32

FreeEnvironmentStringsA GetConsoleAliasesLengthA ReadConsoleW CreateDirectoryExW GetSystemDirectoryW LoadLibraryW InitializeCriticalSectionAndSpinCount CreateEventA LeaveCriticalSection LocalHandle GetBinaryTypeW CompareStringW lstrlenW ReplaceFileA FreeLibraryAndExitThread SetLastError MapViewOfFile AttachConsole VirtualAlloc SetStdHandle GetAtomNameA WriteConsoleA LocalAlloc SetCalendarInfoW WriteProfileSectionW SetConsoleWindowInfo GetModuleFileNameA GetModuleHandleA FindFirstChangeNotificationA VirtualProtect GetCPInfoExA CloseHandle BindIoCompletionCallback SetFilePointer UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapReAlloc HeapAlloc GetModuleHandleW Sleep GetProcAddress ExitProcess GetCommandLineA GetStartupInfoA RaiseException RtlUnwind WriteFile GetStdHandle TerminateProcess GetCurrentProcess IsDebuggerPresent HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapSize EnterCriticalSection SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree LoadLibraryA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar GetLocaleInfoA GetConsoleOutputCP WriteConsoleW LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW FlushFileBuffers CreateFileA

user32

ClientToScreen

Sharing