5066774b0025f44c0e7e7ec9949949d9151bfbd96eb0e880d61cf6b050e49489

General

Target
5066774b0025f44c0e7e7ec9949949d9151bfbd96eb0e880d61cf6b050e49489
Size 413KB
Sample241104-ssbj6ssand
SHA256 5066774b0025f44c0e7e7ec9949949d9151bfbd96eb0e880d61cf6b050e49489
MD5 c66d2a0602e9a030b0ec3d1be8c02461
SHA1 dd9673008b885113ae348ddd60d3e48a12621368
SHA512 3515127b2145d11ac5274aa375eb97a5321dee6cb60bb9c1cf9001a26db5df59897179f8bf94de755f3803b6dc23138e9a52fdf9462872a1d63a790ccfcb63cf
SSDEEP 6144:24ZckFI9TcgSWFvvLIh86HDdKxHQjerFPjjlI1IHMsWz:1FIFYCvDFi5KZQyrdjlI1q
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5066774b0025f44c0e7e7ec9949949d9151bfbd96eb0e880d61cf6b050e49489

File Explorer

5066774b0025f44c0e7e7ec9949949d9151bfbd96eb0e880d61cf6b050e49489

.exe 413KB

5066774b0025f44c0e7e7ec9949949d9151bfbd96eb0e880d61cf6b050e49489

IMPHASH 10000824d93b559313fd8ab83d80a053
SHA256 5066774b0025f44c0e7e7ec9949949d9151bfbd96eb0e880d61cf6b050e49489
MD5 c66d2a0602e9a030b0ec3d1be8c02461
SHA1 dd9673008b885113ae348ddd60d3e48a12621368
SHA512 3515127b2145d11ac5274aa375eb97a5321dee6cb60bb9c1cf9001a26db5df59897179f8bf94de755f3803b6dc23138e9a52fdf9462872a1d63a790ccfcb63cf
SSDEEP 6144:24ZckFI9TcgSWFvvLIh86HDdKxHQjerFPjjlI1IHMsWz:1FIFYCvDFi5KZQyrdjlI1q
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

199568

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\tap57_gofabefig\reyiyejoluyuwa\batipofu.pdb

kernel32

FileTimeToDosDateTime UnregisterWait DosDateTimeToFileTime CreateTimerQueue FindFirstChangeNotificationW SetFilePointer FindResourceExW InterlockedDecrement SetFirmwareEnvironmentVariableA GetSystemWindowsDirectoryW FlushViewOfFile FreeEnvironmentStringsA OutputDebugStringW GetModuleHandleW GetPrivateProfileStringW GetSystemWow64DirectoryA CreateActCtxW GetDriveTypeA _hread GetVersionExW VerifyVersionInfoA GetModuleFileNameW GetOverlappedResult CompareStringW lstrlenW GetStartupInfoW InterlockedExchange SetCurrentDirectoryA GetLastError IsDBCSLeadByteEx GetCurrentDirectoryW GetProcAddress GetLongPathNameA VirtualAlloc SetVolumeLabelW GetConsoleDisplayMode CreateMemoryResourceNotification SearchPathA LoadLibraryA OpenMutexA LocalAlloc SetFileApisToANSI WriteProfileSectionW AddAtomA HeapWalk FindAtomA SetEnvironmentVariableA WTSGetActiveConsoleSessionId SetConsoleCursorInfo GetThreadPriority GetProcessShutdownParameters FreeEnvironmentStringsW RequestWakeupLatency GetCPInfoExA GetVersionExA DeleteFileW AddConsoleAliasA FindActCtxSectionStringW CloseHandle CreateFileW SetStdHandle InterlockedIncrement InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection MoveFileA DecodePointer TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer GetCommandLineA HeapSetInformation RaiseException ExitProcess WriteFile GetStdHandle IsProcessorFeaturePresent HeapValidate IsBadReadPtr InitializeCriticalSectionAndSpinCount OutputDebugStringA WriteConsoleW GetFileType LoadLibraryW QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime GetModuleFileNameA WideCharToMultiByte GetEnvironmentStringsW SetHandleCount TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError HeapCreate GetACP GetOEMCP GetCPInfo IsValidCodePage HeapAlloc HeapReAlloc HeapSize HeapQueryInformation HeapFree RtlUnwind MultiByteToWideChar LCMapStringW GetStringTypeW GetConsoleCP GetConsoleMode FlushFileBuffers

user32

GetMessageTime DrawFrameControl

msimg32

GradientFill

Sharing

General

Malware Config

Signatures

File Explorer

5066774b0025f44c0e7e7ec9949949d9151bfbd96eb0e880d61cf6b050e49489

kernel32

user32

msimg32

generic