20c876e38775d65f63a19f56b7f87801d9e4a355644f2d5e61f3462b4dcfab69

General

Target
20c876e38775d65f63a19f56b7f87801d9e4a355644f2d5e61f3462b4dcfab69
Size 434KB
Sample241108-fs459swekg
SHA256 20c876e38775d65f63a19f56b7f87801d9e4a355644f2d5e61f3462b4dcfab69
MD5 897f5a956942f690c7cfc5a2b3e5cb54
SHA1 625ab47ef5659c91116f81bcb5fb2168f09a0263
SHA512 837fbaf0e778135e1799f9e23cadd3a3d4d1da6660e229449a22e4485506dd6537b9f2a05cf35f8349fcebce344feb313bf035d2320f63a72e1a64192dd7a1d6
SSDEEP 6144:z6b0HLLvfYOGa7hFs+TMrSwRoSIPbYVMoNr/psoF3736O1GdkT3TBNht:b6avJMvoS6bgMoNr/psoFr36O+kT3F
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
20c876e38775d65f63a19f56b7f87801d9e4a355644f2d5e61f3462b4dcfab69

File Explorer

20c876e38775d65f63a19f56b7f87801d9e4a355644f2d5e61f3462b4dcfab69

.exe 434KB

20c876e38775d65f63a19f56b7f87801d9e4a355644f2d5e61f3462b4dcfab69

IMPHASH a56511ed406c541d9b05e0ef01c18760
SHA256 20c876e38775d65f63a19f56b7f87801d9e4a355644f2d5e61f3462b4dcfab69
MD5 897f5a956942f690c7cfc5a2b3e5cb54
SHA1 625ab47ef5659c91116f81bcb5fb2168f09a0263
SHA512 837fbaf0e778135e1799f9e23cadd3a3d4d1da6660e229449a22e4485506dd6537b9f2a05cf35f8349fcebce344feb313bf035d2320f63a72e1a64192dd7a1d6
SSDEEP 6144:z6b0HLLvfYOGa7hFs+TMrSwRoSIPbYVMoNr/psoF3736O1GdkT3TBNht:b6avJMvoS6bgMoNr/psoFr36O+kT3F
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

223616

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\besefuvotari6-toneruter\cebexeluju-ciyaxupuz\s.pdb

kernel32

FindFirstVolumeW WaitForSingleObject GetNamedPipeHandleStateA CreateNamedPipeW CallNamedPipeW TerminateProcess FatalExit GetVersionExA CopyFileExW SetConsoleCP VerifyVersionInfoA VerLanguageNameW FindFirstFileExW FreeEnvironmentStringsW SetProcessPriorityBoost SetVolumeMountPointA GetLongPathNameW CopyFileA TlsGetValue VerifyVersionInfoW GetConsoleCursorInfo SystemTimeToTzSpecificLocalTime GetProcessShutdownParameters ReleaseSemaphore BuildCommDCBAndTimeoutsW GetProcAddress GetModuleHandleA GlobalAlloc Sleep MoveFileW GetCommandLineA InterlockedDecrement DeleteFileA GetVolumePathNamesForVolumeNameW SetFileAttributesA GetPrivateProfileIntW HeapSize GetProcessHeap CreateNamedPipeA WriteConsoleOutputW GetStartupInfoW GetDiskFreeSpaceExW GetCPInfoExW GetWindowsDirectoryA GetSystemWow64DirectoryA GetProfileStringW GetCalendarInfoA SetLastError GetExitCodeThread DebugBreak ReadFileScatter ReadFile SetDefaultCommConfigA GetNumberOfConsoleMouseButtons GlobalWire GetSystemWow64DirectoryW WriteProfileStringA lstrcatW FindCloseChangeNotification CreateActCtxA InterlockedPopEntrySList OutputDebugStringW InterlockedExchange DefineDosDeviceA LoadLibraryA WriteConsoleW SetSystemTimeAdjustment GetConsoleMode SetErrorMode UnregisterWaitEx PeekConsoleInputA GetNumberFormatA GetQueuedCompletionStatus FindResourceExA FindNextFileW FindFirstFileA FreeEnvironmentStringsA SetLocalTime EnumTimeFormatsW CreateSemaphoreW HeapSetInformation SetFileShortNameA lstrcpyA HeapWalk CreateHardLinkA RaiseException SetSystemTime LockFile EnumCalendarInfoExW MoveFileExW GetConsoleCP SetConsoleScreenBufferSize SearchPathW FreeConsole GetAtomNameW GetConsoleAliasExesLengthW WriteConsoleInputW LocalLock EnumDateFormatsW SetCommState GetSystemTimeAdjustment EnumSystemLocalesW GetNumaHighestNodeNumber SetEndOfFile GetWriteWatch SetUnhandledExceptionFilter OpenSemaphoreW GetLargestConsoleWindowSize ClearCommError ReleaseActCtx GetComputerNameA HeapValidate GetLastError OpenMutexW GetStringTypeA SetSystemPowerState VirtualUnlock SetWaitableTimer EnumResourceNamesA CreateTimerQueueTimer GetProcessTimes RegisterWaitForSingleObject IsBadWritePtr GetCurrentProcessId FatalAppExitA GetFileAttributesW lstrcpynW DisconnectNamedPipe FillConsoleOutputCharacterA GetCompressedFileSizeA FindNextVolumeMountPointW GetFullPathNameA WriteProfileStringW LockFileEx LeaveCriticalSection SetCurrentDirectoryA GlobalAddAtomW CloseHandle CreateFileW GetCommandLineW EncodePointer IsProcessorFeaturePresent IsBadReadPtr InterlockedIncrement DecodePointer GetModuleHandleW ExitProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW WriteFile GetStdHandle QueryPerformanceCounter GetTickCount GetCurrentThreadId GetSystemTimeAsFileTime GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsSetValue TlsFree HeapCreate GetACP GetOEMCP GetCPInfo IsValidCodePage EnterCriticalSection HeapAlloc GetModuleFileNameA HeapReAlloc HeapQueryInformation HeapFree LoadLibraryW RtlUnwind WideCharToMultiByte LCMapStringW MultiByteToWideChar GetStringTypeW OutputDebugStringA SetFilePointer SetStdHandle FlushFileBuffers

user32

GetMenuItemID

Sharing

General

Malware Config

Signatures

File Explorer

20c876e38775d65f63a19f56b7f87801d9e4a355644f2d5e61f3462b4dcfab69

kernel32

user32

generic