81996a5aba16eb24ab8ba870605ebd0a

General

Target
81996a5aba16eb24ab8ba870605ebd0a
Size 224KB
Sample241107-dsbslsvcnp
SHA256 89e73fc9d6235c1ddb0b970c04661f67872c0d7f8625039e057872d032bdcc08
MD5 81996a5aba16eb24ab8ba870605ebd0a
SHA1 8f74531e876ff557ca8aa91c30216e45a6dafcc1
SHA512 bc342a178929e38941b9b88d555db717d4a4d96546323908078022c17ea4c84cc2673f6e3ea4b2838be729aad8e3ef438438af69bb8dd355fe26d6fcb7dcb26b
SSDEEP 3072:cXhmqKL7qYI2Xy55mdDNz8fP40Ft56BIga352sj9uvQjNvKxD:YELhRX1dDNzwg852sj9uoJvK
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
81996a5aba16eb24ab8ba870605ebd0a

File Explorer

81996a5aba16eb24ab8ba870605ebd0a

.exe 224KB

81996a5aba16eb24ab8ba870605ebd0a

IMPHASH 620df7f1397c0c9696f14e115c5d0ca6
SHA256 89e73fc9d6235c1ddb0b970c04661f67872c0d7f8625039e057872d032bdcc08
MD5 81996a5aba16eb24ab8ba870605ebd0a
SHA1 8f74531e876ff557ca8aa91c30216e45a6dafcc1
SHA512 bc342a178929e38941b9b88d555db717d4a4d96546323908078022c17ea4c84cc2673f6e3ea4b2838be729aad8e3ef438438af69bb8dd355fe26d6fcb7dcb26b
SSDEEP 3072:cXhmqKL7qYI2Xy55mdDNz8fP40Ft56BIga352sj9uvQjNvKxD:YELhRX1dDNzwg852sj9uoJvK
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

21201

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\dolekefebecev87\fixokomocar_numekoca\gixedogudewu.pdb

kernel32

GetConsoleAliasExesA LoadResource VerSetConditionMask InterlockedDecrement WaitNamedPipeA HeapFree SetComputerNameW GetSystemDefaultLCID GetModuleHandleW GetConsoleAliasesLengthA GetGeoInfoW GlobalAlloc SetFileShortNameW LoadLibraryW GetFileAttributesA GetConsoleAliasW GetFileAttributesW WriteConsoleW RaiseException SetLastError GetProcAddress VirtualAlloc SetFirmwareEnvironmentVariableW IsValidCodePage LoadLibraryA WriteConsoleA LocalAlloc AddAtomW FoldStringW GetModuleHandleA CreateMutexA FindNextFileW GetFileAttributesExW LCMapStringW GetStartupInfoW SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection GetLastError SetFilePointer TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount SetStdHandle RtlUnwind GetCPInfo GetACP GetOEMCP HeapAlloc HeapReAlloc WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringA MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize CloseHandle GetConsoleOutputCP CreateFileA

Sharing

General

Malware Config

Signatures

File Explorer

81996a5aba16eb24ab8ba870605ebd0a

kernel32

generic