4f547e1db3db224956a2de52f3486aa4faa87aefd481bf8a58f69c6423cb60af[.]exe

General

Target
4f547e1db3db224956a2de52f3486aa4faa87aefd481bf8a58f69c6423cb60af.exe
Size 342KB
Sample240725-dcs2ysthkm
SHA256 4f547e1db3db224956a2de52f3486aa4faa87aefd481bf8a58f69c6423cb60af
MD5 771b54897012d3d29b5baaff3abad9a0
SHA1 8242f2121425bca742b800d3cfb1882120d40051
SHA512 f103172e925fb87aa12095dde808e2f9052f1aca18c618f9e4c43ba2cef0b8e2058881a8623c1e1c23042000cb77f1047eb7c4d317ec270e4bc7fd9ed5e21aef
SSDEEP 6144:9mqZEKFVpQQC1rLzpktU58xsWhK30kvnigabwVfsxv:9mq9FVpoXpktdMiBx
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4f547e1db3db224956a2de52f3486aa4faa87aefd481bf8a58f69c6423cb60af.exe

File Explorer

4f547e1db3db224956a2de52f3486aa4faa87aefd481bf8a58f69c6423cb60af.exe

.exe 342KB

4f547e1db3db224956a2de52f3486aa4faa87aefd481bf8a58f69c6423cb60af.exe

IMPHASH beddc31176fbd42897a58cb208f48486
SHA256 4f547e1db3db224956a2de52f3486aa4faa87aefd481bf8a58f69c6423cb60af
MD5 771b54897012d3d29b5baaff3abad9a0
SHA1 8242f2121425bca742b800d3cfb1882120d40051
SHA512 f103172e925fb87aa12095dde808e2f9052f1aca18c618f9e4c43ba2cef0b8e2058881a8623c1e1c23042000cb77f1047eb7c4d317ec270e4bc7fd9ed5e21aef
SSDEEP 6144:9mqZEKFVpQQC1rLzpktU58xsWhK30kvnigabwVfsxv:9mq9FVpoXpktdMiBx
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

663552

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\kolugidefimu\hom_megire.pdb

kernel32

InterlockedCompareExchange OpenWaitableTimerW CreateEventA ReadConsoleInputA WaitNamedPipeW FindVolumeMountPointClose SetSystemTimeAdjustment FindNextFileW EnumResourceTypesW GetModuleFileNameW IsBadCodePtr DeleteFileA SearchPathW VirtualAlloc WriteConsoleOutputCharacterA GetConsoleAliasA GetShortPathNameW GetPrivateProfileStringA PeekConsoleInputA GetModuleHandleA GetProcAddress GetSystemDefaultLangID FindFirstChangeNotificationW GetFileType SetFileShortNameW lstrcpynA AddAtomW SetConsoleCtrlHandler CreateMutexA GetLongPathNameW FoldStringW ResetEvent GlobalWire GetComputerNameW GetVersionExA GetSystemDefaultLCID GetProcessHandleCount GetLastError VirtualProtect GlobalAlloc SetFileShortNameA GetFileSize GetFileAttributesExW SetComputerNameA GetFileAttributesA ReadConsoleW FindFirstChangeNotificationA GetVolumePathNameA GlobalGetAtomNameA LoadLibraryA RtlUnwind RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA HeapFree EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle DeleteCriticalSection GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapAlloc Sleep ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount SetFilePointer ReadFile GetConsoleCP GetConsoleMode CloseHandle CreateFileA HeapSize FlushFileBuffers LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEndOfFile GetProcessHeap

advapi32

ClearEventLogA

ole32

CoRevokeMallocSpy

Sharing