c51ff452f00ecb666422b735d7027ab10d75d850c4e665d21fce4c57ce4c71d7

General

Target
c51ff452f00ecb666422b735d7027ab10d75d850c4e665d21fce4c57ce4c71d7
Size 224KB
Sample241015-e6l16sygpm
SHA256 c51ff452f00ecb666422b735d7027ab10d75d850c4e665d21fce4c57ce4c71d7
MD5 a1aecec057be3ed2d63092d098a7aac9
SHA1 eaf32613fb087d9ddab2cc1d4728b592e02f22f4
SHA512 2c9d80d52c4d51cd1ae63436ba8d45efdaf89ea895cd5d4f707a3dad092c5e46e12ffddb80b47205f91e73691faec385a87438b410e85dc4fe341a7e2ee5c01a
SSDEEP 3072:lJtv4wubF7ZCUzLj4JAeNkhqVAeZmOCCX/qsc51FlLEIpMaD4K1fm:l33g73LjNeNkwAvCX/qP1FR3DJf
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c51ff452f00ecb666422b735d7027ab10d75d850c4e665d21fce4c57ce4c71d7

File Explorer

c51ff452f00ecb666422b735d7027ab10d75d850c4e665d21fce4c57ce4c71d7

.exe 224KB

c51ff452f00ecb666422b735d7027ab10d75d850c4e665d21fce4c57ce4c71d7

IMPHASH a7a46e8048e804699368d22fff8c2cfd
SHA256 c51ff452f00ecb666422b735d7027ab10d75d850c4e665d21fce4c57ce4c71d7
MD5 a1aecec057be3ed2d63092d098a7aac9
SHA1 eaf32613fb087d9ddab2cc1d4728b592e02f22f4
SHA512 2c9d80d52c4d51cd1ae63436ba8d45efdaf89ea895cd5d4f707a3dad092c5e46e12ffddb80b47205f91e73691faec385a87438b410e85dc4fe341a7e2ee5c01a
SSDEEP 3072:lJtv4wubF7ZCUzLj4JAeNkhqVAeZmOCCX/qsc51FlLEIpMaD4K1fm:l33g73LjNeNkwAvCX/qP1FR3DJf
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

41542

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\zohokovuxuvo16_rucude.pdb

kernel32

LoadLibraryA ReadConsoleA GetVolumeInformationA GetComputerNameW VerLanguageNameA LocalFlags InterlockedDecrement SetSystemTimeAdjustment SetLocaleInfoA FindNextVolumeW GetConsoleAliasExesLengthW EnumSystemCodePagesA FindNextFileA CopyFileExA MoveFileWithProgressW VerifyVersionInfoA LocalSize DebugBreak GlobalGetAtomNameA MapViewOfFileEx GetWindowsDirectoryA DeleteFileA lstrlenW IsBadReadPtr FindResourceW GetComputerNameExW GetProcAddress GetStringTypeW GetFileTime GetConsoleAliasesLengthA DeleteVolumeMountPointA GetOEMCP CreateIoCompletionPort CopyFileA lstrcpynW WriteConsoleA GetCommandLineW MoveFileWithProgressA GetProfileSectionA WriteConsoleOutputA SearchPathA GetCommandLineA FindFirstChangeNotificationA VerifyVersionInfoW GetCalendarInfoA GetConsoleTitleA CreateActCtxA FormatMessageW GetModuleHandleW CreateJobObjectA GetConsoleFontSize FindNextVolumeA GlobalFlags GetCurrentConsoleFont GetModuleHandleA LoadLibraryW InitializeCriticalSection GetComputerNameA GetStringTypeExA OpenMutexA FindResourceA RtlCaptureContext LeaveCriticalSection GetPrivateProfileStructA DeleteFiber EnumDateFormatsW EnumCalendarInfoA InterlockedExchange InterlockedIncrement GetNamedPipeHandleStateW UnregisterWait LocalAlloc GetLogicalDriveStringsA SetLastError WideCharToMultiByte MultiByteToWideChar Sleep DeleteCriticalSection EnterCriticalSection RtlUnwind RaiseException GetLastError HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent MoveFileA GetStartupInfoW LCMapStringA LCMapStringW GetCPInfo HeapAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc HeapReAlloc ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetACP IsValidCodePage GetLocaleInfoA GetStringTypeA HeapSize GetUserDefaultLCID EnumSystemLocalesA IsValidLocale InitializeCriticalSectionAndSpinCount SetFilePointer GetConsoleCP GetConsoleMode GetLocaleInfoW SetStdHandle GetConsoleOutputCP WriteConsoleW FlushFileBuffers ReadFile CreateFileA CloseHandle

user32

CharUpperBuffA

Sharing

General

Malware Config

Signatures

File Explorer

c51ff452f00ecb666422b735d7027ab10d75d850c4e665d21fce4c57ce4c71d7

kernel32

user32

generic