127f291dff93a68e3a1c7159fe474568cf61f5701cd2a8ef13dadf332c3cf37d

General

Target
127f291dff93a68e3a1c7159fe474568cf61f5701cd2a8ef13dadf332c3cf37d
Size 1.2MB
Sample241104-stsvvasaqf
SHA256 127f291dff93a68e3a1c7159fe474568cf61f5701cd2a8ef13dadf332c3cf37d
MD5 7878498868c470e76ba6fd2404b95945
SHA1 6f41071eb76e5789f7887b80eda7b4d5b4e3f184
SHA512 07eb2f18d0b85bfa3da17684fe20eda86d64a223cbffc1bfefb3e70bf06b7224eda35c064fd61ab866c7df04384287238198fd8e2cc668ae472faf4e4956ae4f
SSDEEP 24576:XnLCqjLUI8q58upBK+vy+S2/Z8qqBrvDIV:XLNjLUd+bpBKqyc/GP
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
127f291dff93a68e3a1c7159fe474568cf61f5701cd2a8ef13dadf332c3cf37d

File Explorer

127f291dff93a68e3a1c7159fe474568cf61f5701cd2a8ef13dadf332c3cf37d

.exe 1.2MB

127f291dff93a68e3a1c7159fe474568cf61f5701cd2a8ef13dadf332c3cf37d

IMPHASH f41d570586bd418c8939e1253d5c25bd
SHA256 127f291dff93a68e3a1c7159fe474568cf61f5701cd2a8ef13dadf332c3cf37d
MD5 7878498868c470e76ba6fd2404b95945
SHA1 6f41071eb76e5789f7887b80eda7b4d5b4e3f184
SHA512 07eb2f18d0b85bfa3da17684fe20eda86d64a223cbffc1bfefb3e70bf06b7224eda35c064fd61ab866c7df04384287238198fd8e2cc668ae472faf4e4956ae4f
SSDEEP 24576:XnLCqjLUI8q58upBK+vy+S2/Z8qqBrvDIV:XLNjLUd+bpBKqyc/GP
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

26990

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\vuzatidufoga\l.pdb

kernel32

CreateHardLinkA GetConsoleAliasesA LoadLibraryW IsValidLocale _hread CreateEventA FormatMessageW GetStringTypeExW GetExitCodeProcess lstrcpynW EnumSystemCodePagesA GetFileAttributesW WriteConsoleW WritePrivateProfileSectionW GetLogicalDriveStringsA ChangeTimerQueueTimer SetLastError GetProcAddress LocalAlloc FindAtomA FoldStringA FreeEnvironmentStringsW VirtualProtect GetWindowsDirectoryW GetFileInformationByHandle GlobalReAlloc LCMapStringW CloseHandle CreateFileA FlushFileBuffers GetConsoleOutputCP WriteConsoleA CallNamedPipeA GlobalAddAtomA VirtualAlloc GetVolumeNameForVolumeMountPointA InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree RtlUnwind RaiseException TerminateProcess GetCurrentProcess IsDebuggerPresent HeapAlloc SetHandleCount GetStdHandle GetFileType GetStartupInfoA GetModuleHandleW ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount LoadLibraryA LCMapStringA SetStdHandle

user32

ClientToScreen NotifyWinEvent LoadMenuA InvalidateRgn GetIconInfo GetMenuInfo SetScrollInfo

gdi32

GetGlyphIndicesW

advapi32

RegOpenKeyA

Sharing

General

Malware Config

Signatures

File Explorer

127f291dff93a68e3a1c7159fe474568cf61f5701cd2a8ef13dadf332c3cf37d

kernel32

user32

gdi32

advapi32

generic