545b95fd1922a264288438c0bf099974e079d3036a9eb638cedac93bc2107809

General

Target
545b95fd1922a264288438c0bf099974e079d3036a9eb638cedac93bc2107809
Size 446KB
Sample241108-jl2cksydlc
SHA256 545b95fd1922a264288438c0bf099974e079d3036a9eb638cedac93bc2107809
MD5 7d40634976f97b8d3d5bf489df7bcac3
SHA1 529e12b913bb2b57c542a8942f2ec107dc33080f
SHA512 90f261d9e68efe365c8b5b3d647b1157334080a13d275b1264e4542e9baafacc2dd609790dd762dd38755476b3bade35208a571d5e6327b4f0975b6644436778
SSDEEP 6144:+joYSL1G2fCi9q2IxEjfR9uTCCZC9+IpUrfi7+Pe7cTT6Hin6v9R:FbGCIEjfRulC9+IerfaYe7LW6v
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
545b95fd1922a264288438c0bf099974e079d3036a9eb638cedac93bc2107809

File Explorer

545b95fd1922a264288438c0bf099974e079d3036a9eb638cedac93bc2107809

.exe 446KB

545b95fd1922a264288438c0bf099974e079d3036a9eb638cedac93bc2107809

IMPHASH 96bf94db34968cb798fffdd2042c95ad
SHA256 545b95fd1922a264288438c0bf099974e079d3036a9eb638cedac93bc2107809
MD5 7d40634976f97b8d3d5bf489df7bcac3
SHA1 529e12b913bb2b57c542a8942f2ec107dc33080f
SHA512 90f261d9e68efe365c8b5b3d647b1157334080a13d275b1264e4542e9baafacc2dd609790dd762dd38755476b3bade35208a571d5e6327b4f0975b6644436778
SSDEEP 6144:+joYSL1G2fCi9q2IxEjfR9uTCCZC9+IpUrfi7+Pe7cTT6Hin6v9R:FbGCIEjfRulC9+IerfaYe7LW6v
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

226400

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\xokexufaramac1.pdb

kernel32

FindFirstVolumeA WaitForSingleObject GetNamedPipeHandleStateA CreateNamedPipeW CallNamedPipeW TerminateThread FatalExit GetVersionExA CopyFileExW SetConsoleCP VerifyVersionInfoA VerLanguageNameA FindFirstFileExW FreeEnvironmentStringsW SetProcessPriorityBoost SetVolumeMountPointA GetLongPathNameW CopyFileA TlsSetValue VerifyVersionInfoW GetConsoleCursorInfo TzSpecificLocalTimeToSystemTime GetProcessShutdownParameters ReleaseSemaphore BuildCommDCBAndTimeoutsW GetProcAddress GetModuleHandleA GlobalAlloc Sleep TlsGetValue MoveFileW GetCommandLineW InterlockedExchange DeleteFileA CreateActCtxW SetFileAttributesA GetPrivateProfileIntW HeapValidate GetProcessHeap CreateNamedPipeA WriteConsoleOutputW GetStartupInfoA GetDiskFreeSpaceExW GetCPInfoExW GetWindowsDirectoryA GetSystemWow64DirectoryA SetLastError GetProfileStringW GetCalendarInfoA GetTickCount GetExitCodeThread DebugBreak FindFirstFileA ReadFileScatter ReadFile GetNumberOfConsoleMouseButtons GetSystemWow64DirectoryW WriteProfileStringA lstrcatW CreateActCtxA InterlockedPopEntrySList DefineDosDeviceA WriteConsoleW InterlockedDecrement SetSystemTimeAdjustment HeapWalk SetErrorMode PeekConsoleInputA GetNumberFormatW GetQueuedCompletionStatus FreeEnvironmentStringsA SetLocalTime FindResourceExW CreateSemaphoreW HeapSetInformation SetFileShortNameA lstrcpyA ReplaceFileW LockFile MoveFileExW GetConsoleCP GetVolumePathNameW SetConsoleScreenBufferSize FreeConsole GetConsoleAliasExesLengthW WriteConsoleInputW LocalLock SetCommState GetSystemTimeAdjustment EnumSystemLocalesW GetNumaHighestNodeNumber SetEndOfFile ChangeTimerQueueTimer GetWriteWatch RaiseException OpenSemaphoreW GetLargestConsoleWindowSize ClearCommError ReleaseActCtx GetComputerNameW GetLastError OpenMutexW GetStringTypeA VirtualUnlock SetWaitableTimer CreateTimerQueueTimer GetProcessTimes IsBadWritePtr FatalAppExitA lstrcpynW SetNamedPipeHandleState FillConsoleOutputCharacterW GetCompressedFileSizeA FindNextVolumeMountPointW GetFullPathNameA WriteProfileStringW LockFileEx LeaveCriticalSection SetCurrentDirectoryA GlobalAddAtomW ReadFileEx EncodePointer DecodePointer GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW IsBadReadPtr IsProcessorFeaturePresent TlsAlloc GetCurrentThreadId TlsFree GetModuleHandleW InterlockedIncrement ExitProcess WriteFile GetStdHandle EnterCriticalSection QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection HeapCreate SetFilePointer WideCharToMultiByte GetConsoleMode OutputDebugStringA OutputDebugStringW LoadLibraryW MultiByteToWideChar GetACP GetOEMCP GetCPInfo IsValidCodePage HeapAlloc GetModuleFileNameA HeapReAlloc HeapSize HeapQueryInformation HeapFree RtlUnwind SetStdHandle GetStringTypeW LCMapStringW FlushFileBuffers CreateFileW CloseHandle

user32

GetComboBoxInfo GetAltTabInfoA

Sharing

General

Malware Config

Signatures

File Explorer

545b95fd1922a264288438c0bf099974e079d3036a9eb638cedac93bc2107809

kernel32

user32

generic