f5b3b8e02bdd48fb78163e0351403e1302a0ff3125e73b1082fe1f672554174f

General

Target
f5b3b8e02bdd48fb78163e0351403e1302a0ff3125e73b1082fe1f672554174f
Size 1.2MB
Sample241104-rxddws1dpe
SHA256 f5b3b8e02bdd48fb78163e0351403e1302a0ff3125e73b1082fe1f672554174f
MD5 aee811853a0c62e2de24c75a68be6209
SHA1 60ca76a80532291711727a205cfaf54a0f3120b7
SHA512 335c42df86e3dc5614f9ef9f396797af088a84e68a682ccf563a447b675b48c28cb6a8bd731a86152f3aa75e3db413da3322ff0e587ba4d81e512735364e79af
SSDEEP 24576:a8FAGzhOxi/8+hxyHwVrKZzyykcgwIk4vkoFNxeAs:fKoyI1EQVazy0RIk4vkoFHe
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5b3b8e02bdd48fb78163e0351403e1302a0ff3125e73b1082fe1f672554174f

File Explorer

f5b3b8e02bdd48fb78163e0351403e1302a0ff3125e73b1082fe1f672554174f

.exe 1.2MB

f5b3b8e02bdd48fb78163e0351403e1302a0ff3125e73b1082fe1f672554174f

IMPHASH cbb199b85bd7e99e36eb212e7f14e32a
SHA256 f5b3b8e02bdd48fb78163e0351403e1302a0ff3125e73b1082fe1f672554174f
MD5 aee811853a0c62e2de24c75a68be6209
SHA1 60ca76a80532291711727a205cfaf54a0f3120b7
SHA512 335c42df86e3dc5614f9ef9f396797af088a84e68a682ccf563a447b675b48c28cb6a8bd731a86152f3aa75e3db413da3322ff0e587ba4d81e512735364e79af
SSDEEP 24576:a8FAGzhOxi/8+hxyHwVrKZzyykcgwIk4vkoFNxeAs:fKoyI1EQVazy0RIk4vkoFHe
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

23767

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\yufo\tuzuyasofateyi27-lariwayahu\sesuvamefez\lu.pdb

kernel32

FindResourceExW BackupSeek GetProcessPriorityBoost GetModuleHandleW EnumCalendarInfoExW GetConsoleAliasesLengthA GetNumberFormatA GetWindowsDirectoryA EnumTimeFormatsA TzSpecificLocalTimeToSystemTime EnumResourceTypesA FindResourceExA GlobalAlloc LoadLibraryW GetCalendarInfoA GetConsoleAliasW GlobalUnlock GetCurrentDirectoryW SetLastError GetProcAddress VirtualAlloc WriteProfileSectionA lstrlenA GetDiskFreeSpaceW SetThreadPriorityBoost WriteConsoleA InterlockedExchangeAdd BeginUpdateResourceA AddAtomA WaitForMultipleObjects GetDefaultCommConfigA GetConsoleTitleW VirtualProtect GetCPInfoExA TlsAlloc AddConsoleAliasA DebugBreak FindNextVolumeA GetModuleHandleA HeapSize GetDateFormatW GetConsoleDisplayMode GetComputerNameA MultiByteToWideChar Sleep ExitProcess GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc GetLastError HeapFree GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsSetValue TlsFree GetCurrentThreadId WriteFile GetStdHandle GetModuleFileNameA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection LoadLibraryA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA

user32

GetWindowLongW GetSysColorBrush RegisterClassW SetCaretPos CharLowerBuffW

gdi32

GetColorAdjustment GetCharWidthW

Sharing

General

Malware Config

Signatures

File Explorer

f5b3b8e02bdd48fb78163e0351403e1302a0ff3125e73b1082fe1f672554174f

kernel32

user32

gdi32

generic