452ae55c2ffc9fcfe8ee4d1ba0f55307fe1b4b9f7f89ac88e80c0e304e2de948

General

Target
452ae55c2ffc9fcfe8ee4d1ba0f55307fe1b4b9f7f89ac88e80c0e304e2de948
Size 1.2MB
Sample241104-ya5cesylak
SHA256 452ae55c2ffc9fcfe8ee4d1ba0f55307fe1b4b9f7f89ac88e80c0e304e2de948
MD5 9b14ee2f7772351a13f9202a9e77d54b
SHA1 7ad09b7a9e91f29cbb79983b4ce438a96f07b4cf
SHA512 caed770381614c39e069a491f46b175b278a2a838dab1578925487af18b39c5f1f909d772e2a613bf5d511b32ba2407af21d3f4958845d8c21b640872206548e
SSDEEP 24576:FhVKo7S6ImQruXrQQMxCzSB9h7qIAtzq6orHFkhWW5lNNR:FHb7OubGlh7y8rl4pl
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
452ae55c2ffc9fcfe8ee4d1ba0f55307fe1b4b9f7f89ac88e80c0e304e2de948

File Explorer

452ae55c2ffc9fcfe8ee4d1ba0f55307fe1b4b9f7f89ac88e80c0e304e2de948

.exe 1.2MB

452ae55c2ffc9fcfe8ee4d1ba0f55307fe1b4b9f7f89ac88e80c0e304e2de948

IMPHASH 6585b9b9ad7d80299a944a8f7e11d434
SHA256 452ae55c2ffc9fcfe8ee4d1ba0f55307fe1b4b9f7f89ac88e80c0e304e2de948
MD5 9b14ee2f7772351a13f9202a9e77d54b
SHA1 7ad09b7a9e91f29cbb79983b4ce438a96f07b4cf
SHA512 caed770381614c39e069a491f46b175b278a2a838dab1578925487af18b39c5f1f909d772e2a613bf5d511b32ba2407af21d3f4958845d8c21b640872206548e
SSDEEP 24576:FhVKo7S6ImQruXrQQMxCzSB9h7qIAtzq6orHFkhWW5lNNR:FHb7OubGlh7y8rl4pl
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

28369

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\rojarub-kafitamojezo_bupile_hipem.pdb

kernel32

GetLogicalDriveStringsW SetDefaultCommConfigW CreateHardLinkA GetConsoleAliasesA LoadLibraryW _hread IsBadCodePtr CreateEventA FormatMessageW GetFileAttributesA GetExitCodeProcess SetConsoleMode WritePrivateProfileSectionW ChangeTimerQueueTimer SetLastError GetProcAddress VirtualAlloc GlobalAddAtomA WriteConsoleA LocalAlloc FoldStringA FreeEnvironmentStringsW VirtualProtect EndUpdateResourceA GetWindowsDirectoryW GetFileInformationByHandle InterlockedPushEntrySList LCMapStringW CloseHandle CreateFileA GetModuleHandleA LCMapStringA lstrcpynA CallNamedPipeA EnumSystemCodePagesW GetVolumeNameForVolumeMountPointA InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree RtlUnwind RaiseException TerminateProcess GetCurrentProcess IsDebuggerPresent HeapAlloc SetHandleCount GetStdHandle GetFileType GetStartupInfoA WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers GetModuleHandleW ExitProcess GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW SetFilePointer InitializeCriticalSectionAndSpinCount GetConsoleOutputCP WriteConsoleW SetStdHandle LoadLibraryA

user32

ClientToScreen LoadMenuA InvalidateRgn MessageBoxIndirectA GetMenuInfo CountClipboardFormats SetScrollInfo

gdi32

GetGlyphIndicesW

advapi32

RegOpenKeyA

Sharing

General

Malware Config

Signatures

File Explorer

452ae55c2ffc9fcfe8ee4d1ba0f55307fe1b4b9f7f89ac88e80c0e304e2de948

kernel32

user32

gdi32

advapi32

generic