225e8043b4cbb1f5e64f800dce016c8dffe803bae5c596eb62bfe2cb5dac2de5

General

Target
225e8043b4cbb1f5e64f800dce016c8dffe803bae5c596eb62bfe2cb5dac2de5
Size 813KB
Sample240827-zp92wsshmm
SHA256 225e8043b4cbb1f5e64f800dce016c8dffe803bae5c596eb62bfe2cb5dac2de5
MD5 03851cdd1e543a7f09c0e4ade384bfd4
SHA1 342860ec1d18ac3b2cccd35ca2794d1db7c71353
SHA512 4b6ed235558eeeffac123b707d5d9cb1af448c83162e75051459f8f9eb85cfdb9df903460faf22279df5497efab9c747fa8f1588f38312a7a364a363a3e91b38
SSDEEP 12288:R+KI630b+EJrbydbNKDcEi453oh1Nj0DYK636Zstz0pW5CDmyipL+1ea0mw:Rzkb+qHSbIZz5hW6Z2z0pW9+QFmw
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
225e8043b4cbb1f5e64f800dce016c8dffe803bae5c596eb62bfe2cb5dac2de5

File Explorer

225e8043b4cbb1f5e64f800dce016c8dffe803bae5c596eb62bfe2cb5dac2de5

.exe 813KB

225e8043b4cbb1f5e64f800dce016c8dffe803bae5c596eb62bfe2cb5dac2de5

IMPHASH b8f1346e08181553ffb97208dd7623c2
SHA256 225e8043b4cbb1f5e64f800dce016c8dffe803bae5c596eb62bfe2cb5dac2de5
MD5 03851cdd1e543a7f09c0e4ade384bfd4
SHA1 342860ec1d18ac3b2cccd35ca2794d1db7c71353
SHA512 4b6ed235558eeeffac123b707d5d9cb1af448c83162e75051459f8f9eb85cfdb9df903460faf22279df5497efab9c747fa8f1588f38312a7a364a363a3e91b38
SSDEEP 12288:R+KI630b+EJrbydbNKDcEi453oh1Nj0DYK636Zstz0pW5CDmyipL+1ea0mw:Rzkb+qHSbIZz5hW6Z2z0pW9+QFmw
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8576

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\humodaxuy.pdb

kernel32

ExitProcess GetCommandLineW GetTempFileNameW GetPrivateProfileSectionNamesW GlobalFix SearchPathW WritePrivateProfileStructA CopyFileExW GetDriveTypeW DebugActiveProcessStop SetEndOfFile BuildCommDCBAndTimeoutsA LoadResource SystemTimeToTzSpecificLocalTime DeleteVolumeMountPointA ScrollConsoleScreenBufferW SetConsoleActiveScreenBuffer SetHandleInformation GetProfileStringW GetProfileSectionA SetComputerNameW FlushConsoleInputBuffer CallNamedPipeW GetProcessPriorityBoost CreateNamedPipeW IsBadReadPtr EnumTimeFormatsW TlsSetValue GlobalAlloc LoadLibraryW GetConsoleMode GetSystemPowerStatus GlobalFlags HeapCreate GetFileAttributesW GetBinaryTypeA GetTimeZoneInformation GetConsoleFontSize GetOverlappedResult lstrlenW DisconnectNamedPipe RaiseException DeactivateActCtx CreateJobObjectA FreeLibraryAndExitThread OpenMutexW GetLastError GetCurrentDirectoryW SetLastError GetProcAddress VirtualAlloc SetVolumeLabelW LocalLock MoveFileW CopyFileA GetConsoleDisplayMode EnterCriticalSection OpenWaitableTimerA GetLocalTime OpenThread WriteConsoleA SetConsoleOutputCP SetFileApisToANSI SetCommMask GetTapeParameters WaitForMultipleObjects SetSystemTime GetOEMCP WriteProfileStringA GetModuleHandleA RequestWakeupLatency GetConsoleCursorInfo OpenSemaphoreW AddConsoleAliasA GetVolumeInformationW lstrcpyA WideCharToMultiByte MoveFileA GetStartupInfoW HeapValidate TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW InterlockedIncrement InterlockedDecrement GetACP GetCPInfo IsValidCodePage TlsGetValue GetModuleHandleW TlsAlloc GetCurrentThreadId TlsFree LeaveCriticalSection DeleteCriticalSection QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType GetStartupInfoA HeapDestroy HeapFree VirtualFree GetModuleFileNameA WriteFile HeapAlloc HeapSize HeapReAlloc DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW RtlUnwind MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetFilePointer GetConsoleCP InitializeCriticalSectionAndSpinCount LoadLibraryA FlushFileBuffers ReadFile SetStdHandle GetConsoleOutputCP CloseHandle CreateFileA

user32

GetCursorInfo

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

225e8043b4cbb1f5e64f800dce016c8dffe803bae5c596eb62bfe2cb5dac2de5

kernel32

user32

generic