666c0cbe3f026dacf25bcad398bd418d456ccf0e

General

Target
666c0cbe3f026dacf25bcad398bd418d456ccf0e
Size 353KB
Sample241109-18k3jstdmh
SHA256 3d9b7c2c75ba7325ba13ec7029e9034241c97bce4362112868a702776d8ac8be
MD5 9447d585f5e7ba371a08e7f6a683b110
SHA1 666c0cbe3f026dacf25bcad398bd418d456ccf0e
SHA512 8811eca360c33df74d40195e05ef3940197c80ed422b39661a68957693c7d077a0d599f4cd9ebf5d74ebac6113f1609f3aa802a933f2a8abaa02337308b379a1
SSDEEP 6144:8VU7zRF/jHihU3fa8ZcdgpizbEZhgVgevU1gRmiM3Si1:GU7f/jHih/Ucdgdgmev6ymi1
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
666c0cbe3f026dacf25bcad398bd418d456ccf0e

File Explorer

666c0cbe3f026dacf25bcad398bd418d456ccf0e

.exe 353KB

666c0cbe3f026dacf25bcad398bd418d456ccf0e

IMPHASH 5fe1cebf1b69cc6694ca96a35f84fba1
SHA256 3d9b7c2c75ba7325ba13ec7029e9034241c97bce4362112868a702776d8ac8be
MD5 9447d585f5e7ba371a08e7f6a683b110
SHA1 666c0cbe3f026dacf25bcad398bd418d456ccf0e
SHA512 8811eca360c33df74d40195e05ef3940197c80ed422b39661a68957693c7d077a0d599f4cd9ebf5d74ebac6113f1609f3aa802a933f2a8abaa02337308b379a1
SSDEEP 6144:8VU7zRF/jHihU3fa8ZcdgpizbEZhgVgevU1gRmiM3Si1:GU7f/jHih/Ucdgdgmev6ymi1
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

40192

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\dabixibiyuhev93\vajo31\jijolunejur52\fesino.pdb

kernel32

HeapWalk GetNamedPipeHandleStateW SystemTimeToFileTime FillConsoleOutputCharacterW CreateMailslotW TerminateProcess GetLastError GetVersionExA FreeResource EnumResourceNamesA FindNextFileA CopyFileExW BuildCommDCBW SetDefaultCommConfigA WriteProfileStringW WritePrivateProfileStructW LocalCompact ChangeTimerQueueTimer ReadConsoleInputA WriteConsoleInputA LoadResource AddAtomW SearchPathA GetThreadTimes CallNamedPipeW GetDriveTypeA BuildCommDCBAndTimeoutsW VirtualProtect GetModuleHandleA GlobalAlloc SetThreadIdealProcessor GetProfileSectionW DeleteFileW FindFirstChangeNotificationA VerifyVersionInfoA FormatMessageA SetDllDirectoryW LoadLibraryA WritePrivateProfileStringA GetUserDefaultLCID SetWaitableTimer SetConsoleTextAttribute InterlockedDecrement GetStartupInfoW GetSystemWow64DirectoryA CopyFileW SetCalendarInfoA ContinueDebugEvent EndUpdateResourceW SetLastError FreeLibraryAndExitThread GetModuleFileNameW FatalAppExitA SetSystemTime OpenFileMappingA lstrcmpW WriteFileGather FlushConsoleInputBuffer FindNextVolumeA VirtualAllocEx InterlockedExchangeAdd GlobalUnfix GetSystemWindowsDirectoryA CopyFileA GetACP GlobalFindAtomW lstrcatW GetPrivateProfileStringW SetMailslotInfo CreateActCtxW GetPrivateProfileIntW _lwrite OutputDebugStringW CreateNamedPipeA GetAtomNameA SetConsoleActiveScreenBuffer EnumResourceTypesA lstrlenA DebugActiveProcess WriteConsoleW lstrcpyA ReadConsoleOutputW GetThreadContext ReleaseActCtx GetStringTypeA GetPrivateProfileStringA GetFileAttributesExA LocalFileTimeToFileTime MoveFileW GetVolumePathNameA GetCommMask SetFileShortNameW VerLanguageNameW LockFile ProcessIdToSessionId GetQueuedCompletionStatus AllocConsole GlobalGetAtomNameW SetComputerNameA GetConsoleAliasExesLengthA WriteConsoleInputW SystemTimeToTzSpecificLocalTime MoveFileWithProgressA GetStringTypeExW EnumSystemLocalesA GetPrivateProfileIntA GetModuleHandleW OpenWaitableTimerA GetConsoleAliasesLengthW GlobalUnWire FillConsoleOutputCharacterA GetCompressedFileSizeA FindNextVolumeMountPointA WriteConsoleOutputCharacterA QueryInformationJobObject GetConsoleAliasExesA EnumDateFormatsA SetDefaultCommConfigW OpenMutexA RaiseException GetCommandLineA GetStartupInfoA HeapValidate IsBadReadPtr DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime Sleep InterlockedIncrement GetProcAddress ExitProcess GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType TlsGetValue TlsAlloc TlsSetValue TlsFree HeapDestroy HeapCreate HeapFree VirtualFree WriteFile HeapAlloc HeapSize HeapReAlloc VirtualAlloc GetOEMCP GetCPInfo IsValidCodePage RtlUnwind InitializeCriticalSectionAndSpinCount DebugBreak OutputDebugStringA LoadLibraryW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeW GetLocaleInfoA SetFilePointer GetConsoleCP GetConsoleMode SetStdHandle WriteConsoleA GetConsoleOutputCP CreateFileA CloseHandle FlushFileBuffers

advapi32

InitiateSystemShutdownW

Sharing

General

Malware Config

Signatures

File Explorer

666c0cbe3f026dacf25bcad398bd418d456ccf0e

kernel32

advapi32

generic