46de1574c1a157539a558b4812cf0b32c74ac8a3dc65daf4c61ac42f5729881b

General

Target
46de1574c1a157539a558b4812cf0b32c74ac8a3dc65daf4c61ac42f5729881b
Size 271KB
Sample241104-1myfraycnn
SHA256 46de1574c1a157539a558b4812cf0b32c74ac8a3dc65daf4c61ac42f5729881b
MD5 58468887a78a4657b7059a56b9a70dfd
SHA1 75624713b5d3c73d5ec8487ab5102764f870c811
SHA512 e32966f65770ce5ee6aef842d12d8e845211e0815ee593f4c2291582582167434a6310f5211390015efaced31dd40357ad1b3ab8446e98363f994bfc0e5e85f4
SSDEEP 6144:KbvBA5mYYHCkPeK9hrhkJnzbi6h1j2rJRDnIWPBxQe:ovG5IHD9RmFV29RDIoBP
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/07aafa336750ed683f0ecbdc0ff918a9e712892cc1ede8ad186932fd3d582736

File Explorer

46de1574c1a157539a558b4812cf0b32c74ac8a3dc65daf4c61ac42f5729881b

.zip 271KB
07aafa336750ed683f0ecbdc0ff918a9e712892cc1ede8ad186932fd3d582736

.exe 350KB

46de1574c1a157539a558b4812cf0b32c74ac8a3dc65daf4c61ac42f5729881b

SHA256 46de1574c1a157539a558b4812cf0b32c74ac8a3dc65daf4c61ac42f5729881b
MD5 58468887a78a4657b7059a56b9a70dfd
SHA1 75624713b5d3c73d5ec8487ab5102764f870c811
SHA512 e32966f65770ce5ee6aef842d12d8e845211e0815ee593f4c2291582582167434a6310f5211390015efaced31dd40357ad1b3ab8446e98363f994bfc0e5e85f4
SSDEEP 6144:KbvBA5mYYHCkPeK9hrhkJnzbi6h1j2rJRDnIWPBxQe:ovG5IHD9RmFV29RDIoBP
MD5 SHA1 SHA512 SSDEEP

07aafa336750ed683f0ecbdc0ff918a9e712892cc1ede8ad186932fd3d582736

IMPHASH d03478a6c3c407f77f1436449d58c5a8
SHA256 07aafa336750ed683f0ecbdc0ff918a9e712892cc1ede8ad186932fd3d582736
MD5 3fb70716445e5012c74ce98636fbfd9f
SHA1 1b6cf158fc8480bc51ae6bf3c77b13ae853c68ea
SHA512 d5b58ce6d0f913655af6aac0928f07b970f1ef3549cbf7e4831d8a3befb3f25660ee3317465ef907f70a503ac82a03261ab72a649c06dda938c396170f1901c8
SSDEEP 6144:szLeroLKHANcQCkPe89hrhkJXzbi6p1h2rJRDnIYnt6Kr2cdI/:szqrIK6r9R81X29RDIYtjr2
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

21620

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\yekajume\78\kowu\69-hi.pdb

kernel32

GetConsoleAliasesLengthW GetConsoleAliasExesA LoadResource VerSetConditionMask InterlockedDecrement WaitNamedPipeA SetFirmwareEnvironmentVariableA GetSystemDefaultLCID GetGeoInfoW GlobalAlloc SetFileShortNameW GetConsoleAliasW GetFileAttributesW WriteConsoleW lstrlenW RaiseException LCMapStringA OpenMutexW SetLastError GetProcAddress FindVolumeMountPointClose VirtualAlloc IsValidCodePage SetComputerNameA LoadLibraryA LocalAlloc AddAtomA FoldStringA GetModuleHandleA CreateMutexA FreeEnvironmentStringsW FindNextFileW GetFileAttributesExW TerminateJobObject LCMapStringW GetStartupInfoW SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection GetLastError SetFilePointer TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection HeapFree CloseHandle GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount SetStdHandle RtlUnwind GetCPInfo GetACP GetOEMCP HeapAlloc HeapReAlloc WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA WriteConsoleA GetConsoleOutputCP HeapSize CreateFileA

Sharing

General

Malware Config

Signatures

File Explorer

46de1574c1a157539a558b4812cf0b32c74ac8a3dc65daf4c61ac42f5729881b

07aafa336750ed683f0ecbdc0ff918a9e712892cc1ede8ad186932fd3d582736

kernel32

generic