7457b4c91de07c6c386dd42d421a3519e8d0013e8751d3233388deba11250925

General

Target
7457b4c91de07c6c386dd42d421a3519e8d0013e8751d3233388deba11250925
Size 445KB
Sample241109-19fjfsspbt
SHA256 7457b4c91de07c6c386dd42d421a3519e8d0013e8751d3233388deba11250925
MD5 87b3b4423f7d3f85bc69522c96d2eaae
SHA1 596aa0bc0d27ebe013323f0b8f2235d812cae42d
SHA512 d040eff687cc1a30119d0742cbf767cd59373fd04e651ee3f55a21a3abd56617a36bbba000449fba81b6e67dc729007fb00ca5a2ddf78e340b6303f6230fd929
SSDEEP 12288:DVbad2U6XyAyJRc1cpBZZOlPYLbO34fKJ:5baSXSJmUZZWPYR
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7457b4c91de07c6c386dd42d421a3519e8d0013e8751d3233388deba11250925

File Explorer

7457b4c91de07c6c386dd42d421a3519e8d0013e8751d3233388deba11250925

.exe 445KB

7457b4c91de07c6c386dd42d421a3519e8d0013e8751d3233388deba11250925

IMPHASH 5dd991f39183aef09270d722c5f3a923
SHA256 7457b4c91de07c6c386dd42d421a3519e8d0013e8751d3233388deba11250925
MD5 87b3b4423f7d3f85bc69522c96d2eaae
SHA1 596aa0bc0d27ebe013323f0b8f2235d812cae42d
SHA512 d040eff687cc1a30119d0742cbf767cd59373fd04e651ee3f55a21a3abd56617a36bbba000449fba81b6e67dc729007fb00ca5a2ddf78e340b6303f6230fd929
SSDEEP 12288:DVbad2U6XyAyJRc1cpBZZOlPYLbO34fKJ:5baSXSJmUZZWPYR
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

214416

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\tobobizeguwa\nijufukaya\puxoyiw\za.pdb

kernel32

SetDllDirectoryW _lwrite InterlockedDecrement SetFirmwareEnvironmentVariableA GetNamedPipeHandleStateA SetHandleInformation SetConsoleScreenBufferSize CancelWaitableTimer SetVolumeMountPointW FindFirstFileExW FreeEnvironmentStringsA GetModuleHandleW GetConsoleAliasesLengthA GetSystemTimeAsFileTime GetPrivateProfileStringW ReadConsoleW GetWindowsDirectoryA GetSystemWow64DirectoryA QueryActCtxW CreateActCtxW GetSystemTimes ActivateActCtx GlobalAlloc GlobalFindAtomA LoadLibraryW ReadConsoleInputA SizeofResource GetSystemWindowsDirectoryA SetConsoleMode HeapValidate GetVolumePathNamesForVolumeNameW TlsGetValue GetSystemDirectoryA CompareStringW GetACP GetStartupInfoW VerifyVersionInfoW GetLastError IsDBCSLeadByteEx SetLastError GetProcAddress CreateNamedPipeA CopyFileA GlobalGetAtomNameA SearchPathA GetPrivateProfileStringA OpenWaitableTimerA WritePrivateProfileStringA WTSGetActiveConsoleSessionId SetConsoleCursorInfo GetProcessShutdownParameters BuildCommDCBA GetCurrentDirectoryA GetFileTime GetVersionExA FileTimeToLocalFileTime TlsFree GetProfileSectionW CommConfigDialogW LocalFileTimeToFileTime GetModuleFileNameW FindFirstChangeNotificationW DeleteFileA GetCommandLineA HeapSetInformation InterlockedIncrement DecodePointer ExitProcess TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer WriteFile GetStdHandle EnterCriticalSection LeaveCriticalSection IsProcessorFeaturePresent SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW IsBadReadPtr TlsAlloc TlsSetValue HeapCreate GetOEMCP GetCPInfo IsValidCodePage OutputDebugStringA WriteConsoleW OutputDebugStringW RtlUnwind MultiByteToWideChar RaiseException SetFilePointer GetConsoleCP GetConsoleMode HeapAlloc HeapReAlloc HeapSize HeapQueryInformation HeapFree LCMapStringW GetStringTypeW FlushFileBuffers ReadFile SetStdHandle CloseHandle CreateFileW

gdi32

GetBitmapBits

Sharing

General

Malware Config

Signatures

File Explorer

7457b4c91de07c6c386dd42d421a3519e8d0013e8751d3233388deba11250925

kernel32

gdi32

generic