8aef68cf6479e2e614efb16018250ccaf84ac50adaea39ba9554f934f2b6497e

General

Target
8aef68cf6479e2e614efb16018250ccaf84ac50adaea39ba9554f934f2b6497e
Size 286KB
Sample241004-cgpdwssdpe
SHA256 8aef68cf6479e2e614efb16018250ccaf84ac50adaea39ba9554f934f2b6497e
MD5 b577c47aa071b75634a4e10a2ca2f63b
SHA1 1198c518490434915efc7fb368bf5d1259855975
SHA512 97f18fb8da882c4d4296dc9e5a258586703cc13052908866160b793e5c844db15f9451d96513dbdfd7757affccb165b60787ac00fc69eefba5d57427562da022
SSDEEP 3072:+myDA8/GeFlY8r+XNdnJSSnjshFTOM6fZFmZI5i+p1t0dj9X5cdA:ZlqQ4bv2Sm5xt0dj9Xi
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8aef68cf6479e2e614efb16018250ccaf84ac50adaea39ba9554f934f2b6497e

File Explorer

8aef68cf6479e2e614efb16018250ccaf84ac50adaea39ba9554f934f2b6497e

.exe 286KB

8aef68cf6479e2e614efb16018250ccaf84ac50adaea39ba9554f934f2b6497e

IMPHASH d6cc7eef7e91d5b40575c3542ffc17dc
SHA256 8aef68cf6479e2e614efb16018250ccaf84ac50adaea39ba9554f934f2b6497e
MD5 b577c47aa071b75634a4e10a2ca2f63b
SHA1 1198c518490434915efc7fb368bf5d1259855975
SHA512 97f18fb8da882c4d4296dc9e5a258586703cc13052908866160b793e5c844db15f9451d96513dbdfd7757affccb165b60787ac00fc69eefba5d57427562da022
SSDEEP 3072:+myDA8/GeFlY8r+XNdnJSSnjshFTOM6fZFmZI5i+p1t0dj9X5cdA:ZlqQ4bv2Sm5xt0dj9Xi
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

15366

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\masukikepig7\torufafu-six11\sid46\tukomej.pdb

kernel32

InterlockedIncrement SetConsoleTextAttribute ReadConsoleA GetCurrentProcess GetTickCount GetCommConfig GetConsoleAliasesLengthA GetWindowsDirectoryA GlobalAlloc GetVolumeInformationA GetLocaleInfoW GetSystemPowerStatus GetConsoleAliasExesLengthW GetVersionExW FindNextVolumeW GetConsoleAliasW CreateFileW ExitThread GetHandleInformation GetLastError GetCurrentDirectoryW FindResourceW PeekConsoleInputW RemoveDirectoryA LoadLibraryA WriteConsoleA GetNumberFormatW QueryDosDeviceW GlobalFindAtomW GetModuleFileNameA FindFirstVolumeMountPointA VirtualProtect _lopen GetCurrentProcessId ResetWriteWatch AreFileApisANSI OutputDebugStringW HeapReAlloc LoadLibraryExW GetProcAddress GetEnvironmentVariableW MultiByteToWideChar EncodePointer DecodePointer ReadFile GetCommandLineA RaiseException RtlUnwind IsProcessorFeaturePresent IsValidCodePage GetACP GetOEMCP GetCPInfo SetLastError GetCurrentThreadId EnterCriticalSection LeaveCriticalSection FlushFileBuffers WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode DeleteCriticalSection ExitProcess GetModuleHandleExW HeapSize HeapFree IsDebuggerPresent SetFilePointerEx GetStdHandle GetFileType GetStartupInfoW HeapAlloc GetProcessHeap GetModuleFileNameW QueryPerformanceCounter GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW GetStringTypeW LCMapStringW SetStdHandle WriteConsoleW CloseHandle

user32

ChangeMenuA CharLowerBuffA DrawFrameControl CharUpperBuffW

advapi32

ReadEventLogA

Sharing

General

Malware Config

Signatures

File Explorer

8aef68cf6479e2e614efb16018250ccaf84ac50adaea39ba9554f934f2b6497e

kernel32

user32

advapi32

generic