ce2933b3ed09b57f4b18b334767d62bb8b7c5dd4423e8edebf4d5e4e9e72b954

General

Target
ce2933b3ed09b57f4b18b334767d62bb8b7c5dd4423e8edebf4d5e4e9e72b954
Size 171KB
Sample241108-e7mzvswcjj
SHA256 ce2933b3ed09b57f4b18b334767d62bb8b7c5dd4423e8edebf4d5e4e9e72b954
MD5 51befbf4431f554e5def6691034e3bec
SHA1 2b920d1d118db00283cfc7299c6c1044b4214d87
SHA512 399334589106806238dbbddf5a7a8774f31153462e155efd338147f1426dada4a8542fdcab70217700091cfcd5f6d86ea86454a85e76e425f3869ce0cd710163
SSDEEP 3072:vfjP8W/DiTBkHlOBkMV8k5ARIHo9FOxuWrxpzbgqrukVggjcGkNIVqI:XjR/DyaF8kMJNIbOkuzbgwuA7ITsq
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ce2933b3ed09b57f4b18b334767d62bb8b7c5dd4423e8edebf4d5e4e9e72b954

File Explorer

ce2933b3ed09b57f4b18b334767d62bb8b7c5dd4423e8edebf4d5e4e9e72b954

.exe 171KB

ce2933b3ed09b57f4b18b334767d62bb8b7c5dd4423e8edebf4d5e4e9e72b954

IMPHASH 18875662b19ade4ddd6bba43f9abb4a3
SHA256 ce2933b3ed09b57f4b18b334767d62bb8b7c5dd4423e8edebf4d5e4e9e72b954
MD5 51befbf4431f554e5def6691034e3bec
SHA1 2b920d1d118db00283cfc7299c6c1044b4214d87
SHA512 399334589106806238dbbddf5a7a8774f31153462e155efd338147f1426dada4a8542fdcab70217700091cfcd5f6d86ea86454a85e76e425f3869ce0cd710163
SSDEEP 3072:vfjP8W/DiTBkHlOBkMV8k5ARIHo9FOxuWrxpzbgqrukVggjcGkNIVqI:XjR/DyaF8kMJNIbOkuzbgwuA7ITsq
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

9567

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\vetateboduvu\taziza\bek27 susaloh9.pdb

kernel32

EndUpdateResourceW SetMailslotInfo HeapFree GetEnvironmentStringsW SetConsoleScreenBufferSize SetEvent OpenSemaphoreA GetTickCount CreateActCtxW Sleep GetVersionExW GetModuleFileNameW GetCPInfoExW GetProcAddress VirtualAlloc GetAtomNameA LoadLibraryA WriteConsoleA LocalAlloc TransmitCommChar BeginUpdateResourceA SetEnvironmentVariableA SetConsoleTitleW LoadLibraryExA EraseTape GetProcessAffinityMask GetCPInfoExA Module32Next DeleteAtom FindActCtxSectionStringW FindNextVolumeA LCMapStringW lstrcpyA EncodePointer DecodePointer GetCommandLineA HeapSetInformation GetStartupInfoW RaiseException UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess HeapAlloc GetLastError IsProcessorFeaturePresent TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetModuleHandleW SetLastError GetCurrentThreadId InterlockedDecrement ReadFile EnterCriticalSection LeaveCriticalSection SetFilePointer CloseHandle ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection HeapCreate QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar RtlUnwind SetStdHandle FlushFileBuffers HeapSize LoadLibraryW WriteConsoleW GetStringTypeW HeapReAlloc CreateFileW

Sharing

General

Malware Config

Signatures

File Explorer

ce2933b3ed09b57f4b18b334767d62bb8b7c5dd4423e8edebf4d5e4e9e72b954

kernel32

generic