b8a4fc91ab608b2b8caa1bdfabfff51d35c63ec4e5beb6a23d2f164b74fe3c6c

General

Target
b8a4fc91ab608b2b8caa1bdfabfff51d35c63ec4e5beb6a23d2f164b74fe3c6c
Size 432KB
Sample241108-mnv55a1cle
SHA256 b8a4fc91ab608b2b8caa1bdfabfff51d35c63ec4e5beb6a23d2f164b74fe3c6c
MD5 ca45d11757fcb1b37ea016037cb0bd64
SHA1 a2d77909655cc7825fe91e34f63b23292445ae29
SHA512 192c2ec4e84b2ff6acd5e3f0f1d6403147ebad9115e37f6e179dcb459852299b5d8d45613e0e829acb4e62900c80ca289be99476ef88a17fe2e102a31b545adc
SSDEEP 6144:JegQHXT3Kt595Gwa3jL/fhaCkIfyOR0iNHxzjK3mdDqkGs/QAB:J6Dat56webfhaCkIfldHxzm3mdVGs/Q
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8a4fc91ab608b2b8caa1bdfabfff51d35c63ec4e5beb6a23d2f164b74fe3c6c

File Explorer

b8a4fc91ab608b2b8caa1bdfabfff51d35c63ec4e5beb6a23d2f164b74fe3c6c

.exe 432KB

b8a4fc91ab608b2b8caa1bdfabfff51d35c63ec4e5beb6a23d2f164b74fe3c6c

IMPHASH 9b5e0e93b958d7de96d2eb171562e213
SHA256 b8a4fc91ab608b2b8caa1bdfabfff51d35c63ec4e5beb6a23d2f164b74fe3c6c
MD5 ca45d11757fcb1b37ea016037cb0bd64
SHA1 a2d77909655cc7825fe91e34f63b23292445ae29
SHA512 192c2ec4e84b2ff6acd5e3f0f1d6403147ebad9115e37f6e179dcb459852299b5d8d45613e0e829acb4e62900c80ca289be99476ef88a17fe2e102a31b545adc
SSDEEP 6144:JegQHXT3Kt595Gwa3jL/fhaCkIfyOR0iNHxzjK3mdDqkGs/QAB:J6Dat56webfhaCkIfldHxzm3mdVGs/Q
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

223408

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\najijusabowog\jibegi\19 digamopelew\pup\34-kor.pdb

kernel32

FindFirstVolumeW WaitForSingleObject GetNamedPipeHandleStateW CreateNamedPipeA CallNamedPipeW TerminateProcess FatalExit GetVersionExA CopyFileExW SetConsoleCP VerifyVersionInfoA VerLanguageNameW FindFirstFileExW FreeEnvironmentStringsW SetProcessPriorityBoost SetVolumeMountPointA GetLongPathNameW CopyFileA TlsGetValue VerifyVersionInfoW GetConsoleCursorInfo SystemTimeToTzSpecificLocalTime GetProcessShutdownParameters MultiByteToWideChar GetNamedPipeHandleStateA BuildCommDCBAndTimeoutsW GetProcAddress GetModuleHandleA GlobalAlloc Sleep MoveFileW GetCommandLineA InterlockedDecrement DeleteFileA GetVolumePathNamesForVolumeNameW GetPrivateProfileStringA GetPrivateProfileIntW HeapSize GetProcessHeap CreateNamedPipeW SetFileShortNameA GetStartupInfoW GetEnvironmentVariableA GetCPInfoExA GetWindowsDirectoryA GetSystemWow64DirectoryA GetProfileStringW GetCalendarInfoW SetLastError GetExitCodeThread DebugBreak FindFirstFileW ReadFileScatter ReadFile SetDefaultCommConfigA GetNumberOfConsoleMouseButtons GlobalWire WritePrivateProfileSectionW WriteProfileStringA lstrcatW FindCloseChangeNotification CreateActCtxW InterlockedPopEntrySList InterlockedExchange SetConsoleTitleW DefineDosDeviceA LoadLibraryA WritePrivateProfileStringW WaitNamedPipeW SetSystemTimeAdjustment GetConsoleMode UnregisterWaitEx PeekConsoleInputA GetNumberFormatA FindResourceExA FindNextFileW FindFirstFileA FreeEnvironmentStringsA CreateSemaphoreW EnumTimeFormatsA SetLocalTime OutputDebugStringW lstrcpyA HeapWalk CreateHardLinkW RaiseException SetSystemTime LockFile EnumCalendarInfoExW MoveFileExA GetConsoleCP SetConsoleScreenBufferSize SearchPathW IsBadStringPtrA GetAtomNameA GetConsoleAliasExesLengthW WriteConsoleInputW LocalLock EnumDateFormatsW SetCommState GetSystemTimeAdjustment EnumSystemLocalesA GetNumaHighestNodeNumber SetEndOfFile GetWriteWatch SetUnhandledExceptionFilter OpenSemaphoreA GetLargestConsoleWindowSize ReleaseActCtx GetComputerNameA HeapValidate GetLastError OpenMutexW GetStringTypeA SetSystemPowerState FindResourceW SetTimerQueueTimer EnumResourceNamesA GetProcessTimes RegisterWaitForSingleObject IsBadWritePtr GetCurrentProcessId FatalAppExitA GetFileAttributesW lstrcpynW DisconnectNamedPipe FillConsoleOutputCharacterA GetCompressedFileSizeA SetFileShortNameW GetFullPathNameA WriteProfileStringW SetInformationJobObject GlobalAddAtomA SetCurrentDirectoryA CreateTimerQueueTimer LeaveCriticalSection CloseHandle CreateFileW GetCommandLineW HeapSetInformation EncodePointer IsProcessorFeaturePresent IsBadReadPtr InterlockedIncrement DecodePointer GetModuleHandleW ExitProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW WriteFile GetStdHandle QueryPerformanceCounter GetTickCount GetCurrentThreadId GetSystemTimeAsFileTime GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsSetValue TlsFree HeapCreate GetACP GetOEMCP GetCPInfo IsValidCodePage EnterCriticalSection HeapAlloc GetModuleFileNameA HeapReAlloc HeapQueryInformation HeapFree LoadLibraryW RtlUnwind WideCharToMultiByte LCMapStringW GetStringTypeW OutputDebugStringA WriteConsoleW SetFilePointer SetStdHandle FlushFileBuffers

user32

GetMenuItemID

Sharing

General

Malware Config

Signatures

File Explorer

b8a4fc91ab608b2b8caa1bdfabfff51d35c63ec4e5beb6a23d2f164b74fe3c6c

kernel32

user32

generic