bd18479b762385d65ce18598622a6b9c3dfbf144821f8b9d374a61857dd632d3

General

Target
bd18479b762385d65ce18598622a6b9c3dfbf144821f8b9d374a61857dd632d3
Size 446KB
Sample241108-jsfpfs1lgl
SHA256 bd18479b762385d65ce18598622a6b9c3dfbf144821f8b9d374a61857dd632d3
MD5 d8f165aa0308f32f30b39117e5e92b59
SHA1 484e1c4237392778a171b0d0d48d12646c68df66
SHA512 93a7fe2b97431d0e217c9206cb8c9c68648a586c5f2a6829b17c674dcdb1d898d99d991216ec15f5c75f0a3074fe3b23b5dd4bfb86c288badb98b1af5e4960c8
SSDEEP 6144:+YyWzDI3pZCdgaf62qT2Ew+34Ua66+u4jPBq2pjSKcGd56:Sv3p4KaEX34UJ6+uw5q2pjxd5
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd18479b762385d65ce18598622a6b9c3dfbf144821f8b9d374a61857dd632d3

File Explorer

bd18479b762385d65ce18598622a6b9c3dfbf144821f8b9d374a61857dd632d3

.exe 446KB

bd18479b762385d65ce18598622a6b9c3dfbf144821f8b9d374a61857dd632d3

IMPHASH e479bf94b263bb2b50eb7920c14ccda8
SHA256 bd18479b762385d65ce18598622a6b9c3dfbf144821f8b9d374a61857dd632d3
MD5 d8f165aa0308f32f30b39117e5e92b59
SHA1 484e1c4237392778a171b0d0d48d12646c68df66
SHA512 93a7fe2b97431d0e217c9206cb8c9c68648a586c5f2a6829b17c674dcdb1d898d99d991216ec15f5c75f0a3074fe3b23b5dd4bfb86c288badb98b1af5e4960c8
SSDEEP 6144:+YyWzDI3pZCdgaf62qT2Ew+34Ua66+u4jPBq2pjSKcGd56:Sv3p4KaEX34UJ6+uw5q2pjxd5
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

226400

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\wimifomazibo sigajofucocas_tonirigohe\jeta\cihexoh.pdb

kernel32

FindFirstVolumeA WaitForSingleObject GetNamedPipeHandleStateA CreateNamedPipeW CallNamedPipeA TerminateThread FatalExit GetVersionExA GetConsoleAliasesLengthA SetConsoleCP VerifyVersionInfoA VerLanguageNameA FindFirstFileExA FreeEnvironmentStringsW GetProcessPriorityBoost SetVolumeMountPointA GetLongPathNameW CopyFileW TlsSetValue VerifyVersionInfoW GetConsoleCursorInfo TzSpecificLocalTimeToSystemTime GetProcessShutdownParameters ReleaseSemaphore BuildCommDCBAndTimeoutsA GetProcAddress GetModuleHandleA GlobalAlloc SleepEx TlsGetValue MoveFileW GetCommandLineW InterlockedExchange DeleteFileA CreateActCtxW SetFileAttributesA GetPrivateProfileIntW HeapValidate GetProcessHeaps CreateNamedPipeA WriteConsoleOutputW GetStartupInfoA GetDiskFreeSpaceExW GetCPInfoExW GetWindowsDirectoryW GetSystemWow64DirectoryA SetLastError GetProfileStringW GetCalendarInfoA GetTickCount GetSystemTime DebugBreak FindFirstFileA WriteFileGather ReadFile GetNumberOfConsoleMouseButtons GetSystemWow64DirectoryW TerminateProcess lstrcatW CreateActCtxA InterlockedPopEntrySList SetCriticalSectionSpinCount DefineDosDeviceA WriteConsoleW InterlockedDecrement HeapWalk SetErrorMode PeekConsoleInputW GetNumberFormatW GetQueuedCompletionStatus FreeEnvironmentStringsA SetLocalTime FindResourceExW CreateSemaphoreW GetThreadLocale SetFileShortNameA lstrcpyW ReplaceFileW LockFile MoveFileExW GetConsoleCP GetVolumePathNameW SetConsoleScreenBufferSize FreeConsole GetConsoleAliasExesLengthW WriteConsoleInputW LocalShrink SetCommState SetSystemTimeAdjustment EnumSystemLocalesW GetNumaHighestNodeNumber SetEndOfFile ChangeTimerQueueTimer GetWriteWatch RaiseException OpenSemaphoreW GetLargestConsoleWindowSize ClearCommError ReleaseActCtx GetLastError GetComputerNameW OpenMutexA GetStringTypeA VirtualUnlock SetWaitableTimer CreateTimerQueueTimer GetProcessTimes IsBadWritePtr FatalAppExitA lstrcpynW SetNamedPipeHandleState FillConsoleOutputCharacterW GetCompressedFileSizeW FindNextVolumeMountPointW GetFullPathNameA WriteProfileStringA LockFileEx LeaveCriticalSection SetCurrentDirectoryA GlobalAddAtomW ReadFileEx EncodePointer DecodePointer HeapSetInformation GetStartupInfoW GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW IsBadReadPtr IsProcessorFeaturePresent TlsAlloc GetCurrentThreadId TlsFree GetModuleHandleW InterlockedIncrement ExitProcess WriteFile GetStdHandle EnterCriticalSection SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW HeapCreate SetFilePointer WideCharToMultiByte GetConsoleMode OutputDebugStringA OutputDebugStringW LoadLibraryW MultiByteToWideChar GetACP GetOEMCP GetCPInfo IsValidCodePage HeapAlloc GetModuleFileNameA HeapReAlloc HeapSize HeapQueryInformation HeapFree RtlUnwind SetStdHandle GetStringTypeW LCMapStringW FlushFileBuffers CreateFileW CloseHandle

user32

GetComboBoxInfo GetAltTabInfoA

Sharing

General

Malware Config

Signatures

File Explorer

bd18479b762385d65ce18598622a6b9c3dfbf144821f8b9d374a61857dd632d3

kernel32

user32

generic