dfbd9f7d0bcb4f69a9722ccf359621090c2451ce69940769b56e7f9ac70d0141

General

Target
dfbd9f7d0bcb4f69a9722ccf359621090c2451ce69940769b56e7f9ac70d0141
Size 423KB
Sample241108-mcswmatjaq
SHA256 dfbd9f7d0bcb4f69a9722ccf359621090c2451ce69940769b56e7f9ac70d0141
MD5 e00b475df529766b38ba366c26fa5312
SHA1 f7835a24c74315be15bc71efca3b919cc16e69ea
SHA512 aaef8611d8769545e05f318f4ee08ed35a6ea9cfad9dcbe9f0b19aed94a761bf9c3ea5d4c17aeedb6898631800e803ae87c0787f6267e754dfb8a8280a9d7b4b
SSDEEP 6144:zKfV9DPD5ZU4u3ea/vVYSyW9Jhh4V1EzUhLkYFdk4elBPhSfai:zmVxb5a4u3eI2Sy/V1EzUhLkielBPD
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dfbd9f7d0bcb4f69a9722ccf359621090c2451ce69940769b56e7f9ac70d0141

File Explorer

dfbd9f7d0bcb4f69a9722ccf359621090c2451ce69940769b56e7f9ac70d0141

.exe 423KB

dfbd9f7d0bcb4f69a9722ccf359621090c2451ce69940769b56e7f9ac70d0141

IMPHASH a2bd4353e1ced7b42b3a08381e3a1a2d
SHA256 dfbd9f7d0bcb4f69a9722ccf359621090c2451ce69940769b56e7f9ac70d0141
MD5 e00b475df529766b38ba366c26fa5312
SHA1 f7835a24c74315be15bc71efca3b919cc16e69ea
SHA512 aaef8611d8769545e05f318f4ee08ed35a6ea9cfad9dcbe9f0b19aed94a761bf9c3ea5d4c17aeedb6898631800e803ae87c0787f6267e754dfb8a8280a9d7b4b
SSDEEP 6144:zKfV9DPD5ZU4u3ea/vVYSyW9Jhh4V1EzUhLkYFdk4elBPhSfai:zmVxb5a4u3eI2Sy/V1EzUhLkielBPD
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

214688

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\noju\dupemoporirej54-huxawohuv\liniyisubupa\zenuhuxo30-yih.pdb

kernel32

ExitProcess GetComputerNameA GetFullPathNameA LocalUnlock GetThreadContext EnumResourceNamesW GlobalMemoryStatus FindResourceA FindFirstFileW FindFirstChangeNotificationW WriteConsoleInputW SetFilePointer TryEnterCriticalSection EnumDateFormatsExW CopyFileExW GetNumaProcessorNode TlsGetValue GetStringTypeA SetLocalTime UnmapViewOfFile MoveFileExA CommConfigDialogA BuildCommDCBAndTimeoutsA SetUnhandledExceptionFilter GlobalAddAtomA MoveFileExW InterlockedDecrement WritePrivateProfileSectionA SetDefaultCommConfigW SetFirmwareEnvironmentVariableA CreateJobObjectW QueryDosDeviceA GetNamedPipeHandleStateA GlobalLock SetVolumeMountPointW SetEvent SetThreadExecutionState SleepEx FreeEnvironmentStringsA _lclose OutputDebugStringW GetCommConfig GetPrivateProfileStringW CreateRemoteThread GetCompressedFileSizeW WaitNamedPipeW EnumTimeFormatsA SetCommState GetSystemWow64DirectoryA WriteFileGather TzSpecificLocalTimeToSystemTime TlsSetValue AllocateUserPhysicalPages FindResourceExA GetConsoleCP GetPrivateProfileIntA LoadLibraryW GetConsoleMode FatalAppExitW GetThreadSelectorEntry CopyFileW GetPrivateProfileStructW GetCalendarInfoA SetSystemTimeAdjustment GetProcessHandleCount GetSystemWindowsDirectoryA ReadConsoleOutputW GetConsoleAliasExesLengthW GetSystemTimeAdjustment GetVersionExW SetConsoleCP DeleteVolumeMountPointW LeaveCriticalSection GetFileAttributesA lstrcpynW SetDllDirectoryA SetConsoleMode HeapValidate GetVolumePathNamesForVolumeNameW SetConsoleCursorPosition GetBinaryTypeA IsBadWritePtr TerminateProcess GetModuleFileNameW CreateActCtxA lstrcmpW lstrlenW IsBadStringPtrA GetTempPathW EnumSystemLocalesA VerifyVersionInfoW SetCurrentDirectoryA GetCPInfoExW OpenMutexW GetLastError GetLongPathNameW SetLastError GetProcAddress GetProcessHeaps VirtualAlloc HeapSize PeekConsoleInputW BackupWrite CreateNamedPipeA EnumDateFormatsExA CreateTimerQueueTimer CreateJobSet LocalLock SetStdHandle EnterCriticalSection VerLanguageNameW SearchPathA BuildCommDCBW DefineDosDeviceA GetPrivateProfileStringA GetAtomNameA OpenMutexA CreateSemaphoreW LocalAlloc WritePrivateProfileStringA CreateHardLinkW GetExitCodeThread GetNumberFormatW SetCurrentDirectoryW SetFileApisToANSI VirtualLock GetCurrentConsoleFont HeapWalk GetPrivateProfileStructA SetSystemTime SetEnvironmentVariableA GetVolumePathNamesForVolumeNameA GetModuleFileNameA GetPrivateProfileSectionNamesA GetDefaultCommConfigA FindNextFileA WriteProfileStringA WTSGetActiveConsoleSessionId EnumDateFormatsA CreateIoCompletionPort SetConsoleTitleW GetModuleHandleA QueueUserWorkItem ContinueDebugEvent lstrcatW HeapSetInformation FatalExit FreeEnvironmentStringsW GetConsoleTitleW RequestWakeupLatency EnumDateFormatsW CompareStringA GetFileAttributesExW GetConsoleCursorInfo FatalAppExitA WriteConsoleOutputAttribute OutputDebugStringA DuplicateHandle SetProcessShutdownParameters OpenSemaphoreW FindFirstVolumeA TerminateJobObject DeleteTimerQueueTimer DeleteFileW GetCurrentProcessId SetFileValidData FindActCtxSectionStringW ResetWriteWatch UnregisterWaitEx InterlockedPushEntrySList CopyFileExA lstrcpyA MoveFileA DeleteFileA EncodePointer DecodePointer GetCommandLineW GetStartupInfoW InterlockedIncrement GetModuleHandleW GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent WriteFile GetStdHandle IsBadReadPtr TlsAlloc GetCurrentThreadId TlsFree SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetEnvironmentStringsW HeapCreate GetACP GetOEMCP GetCPInfo IsValidCodePage RtlUnwind HeapAlloc HeapReAlloc HeapQueryInformation HeapFree WideCharToMultiByte WriteConsoleW LCMapStringW MultiByteToWideChar GetStringTypeW IsProcessorFeaturePresent FlushFileBuffers RaiseException CloseHandle CreateFileW

Sharing

General

Malware Config

Signatures

File Explorer

dfbd9f7d0bcb4f69a9722ccf359621090c2451ce69940769b56e7f9ac70d0141

kernel32

generic