85d46ceccf9dc3aae4d6989b26a429b11bd4c7e15f572d78e0786e98d2908bfc

General

Target
85d46ceccf9dc3aae4d6989b26a429b11bd4c7e15f572d78e0786e98d2908bfc
Size 445KB
Sample241109-29ahwathrn
SHA256 85d46ceccf9dc3aae4d6989b26a429b11bd4c7e15f572d78e0786e98d2908bfc
MD5 930d01d827fbf73905ca36b58387a855
SHA1 3a7f77806fca011a4f1cadfd72bfcc4c3dab53c3
SHA512 bec976d2802410b9e417657b30fa9636f4fdb3a6176c63a86251715368da07525213edf24d27cdca6f46b91aec1311c8ebf0778c3b13dd9528c5ac9797e81aa0
SSDEEP 12288:ELAASw3AByvqRYaSEC3XbaYcAB/9ychVN:EBd3AgyRYac31JJhV
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85d46ceccf9dc3aae4d6989b26a429b11bd4c7e15f572d78e0786e98d2908bfc

File Explorer

85d46ceccf9dc3aae4d6989b26a429b11bd4c7e15f572d78e0786e98d2908bfc

.exe 445KB

85d46ceccf9dc3aae4d6989b26a429b11bd4c7e15f572d78e0786e98d2908bfc

IMPHASH f8a1a153568c8d0114bbef3bf9e0fd81
SHA256 85d46ceccf9dc3aae4d6989b26a429b11bd4c7e15f572d78e0786e98d2908bfc
MD5 930d01d827fbf73905ca36b58387a855
SHA1 3a7f77806fca011a4f1cadfd72bfcc4c3dab53c3
SHA512 bec976d2802410b9e417657b30fa9636f4fdb3a6176c63a86251715368da07525213edf24d27cdca6f46b91aec1311c8ebf0778c3b13dd9528c5ac9797e81aa0
SSDEEP 12288:ELAASw3AByvqRYaSEC3XbaYcAB/9ychVN:EBd3AgyRYac31JJhV
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

226112

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\sivoj-nogaleyoyitu\finoyuwoma\tonuwu.pdb

kernel32

TerminateProcess GetExitCodeProcess GetVersionExA VerifyVersionInfoA CopyFileExA GetConsoleMode GetConsoleCP VerLanguageNameA GetDriveTypeW FindFirstChangeNotificationW FreeEnvironmentStringsW RequestWakeupLatency SetVolumeMountPointA GetLongPathNameA CopyFileW TlsGetValue GetConsoleCursorInfo LocalHandle SystemTimeToTzSpecificLocalTime GetProcessShutdownParameters MultiByteToWideChar LocalUnlock GetNamedPipeHandleStateW BuildCommDCBAndTimeoutsW GetProcAddress GetModuleHandleA GlobalAlloc Sleep MoveFileA GetCommandLineW InterlockedDecrement DeleteFileW GetVolumePathNamesForVolumeNameA GetPrivateProfileStringA GetPrivateProfileIntA HeapSize GetProcessHeaps CreateNamedPipeA GetEnvironmentVariableA GetCPInfoExA GetSystemWindowsDirectoryA GetSystemWow64DirectoryA GetLastError WriteProfileSectionW GetCalendarInfoA SetLastError GetExitCodeThread WaitForDebugEvent ReadFileScatter ReadFile SetDefaultCommConfigA GetNumberOfConsoleMouseButtons GlobalWire WritePrivateProfileSectionW WriteProfileStringA lstrcatW FindCloseChangeNotification CreateActCtxA InterlockedPopEntrySList OutputDebugStringW InterlockedExchange SetConsoleTitleW DefineDosDeviceW LoadLibraryW WritePrivateProfileStringW WaitNamedPipeW InterlockedIncrement SetConsoleMode PeekConsoleInputA GetNumberFormatA CreateSemaphoreW LoadModule FindFirstVolumeW GetPrivateProfileSectionNamesW EnumTimeFormatsA SetLocalTime CreateSemaphoreA FindNextFileA FindFirstFileW FreeEnvironmentStringsA OutputDebugStringA lstrcpyW HeapSetInformation CreateHardLinkW RaiseException GetSystemTime UnlockFile EnumCalendarInfoExA MoveFileExA SetConsoleScreenBufferSize SearchPathW IsBadStringPtrW GetAtomNameW GetConsoleAliasExesLengthA WriteConsoleInputA LocalLock SetCommState EnumSystemLocalesA GetNumaHighestNodeNumber SetEndOfFile GetWriteWatch SetUnhandledExceptionFilter OpenSemaphoreA GetLargestConsoleWindowSize GetProfileStringA ZombifyActCtx GetVolumePathNamesForVolumeNameW EnumDateFormatsW SetSystemTimeAdjustment OpenMutexW GetComputerNameA HeapCompact CommConfigDialogA OpenMutexA GetStringTypeA SetSystemPowerState FindResourceA DeleteTimerQueueTimer EnumResourceNamesW CreateTimerQueueTimer GetProcessTimes UnregisterWait IsBadReadPtr GetCurrentProcessId FatalAppExitW GetFileAttributesW lstrcpynW DisconnectNamedPipe WriteConsoleOutputAttribute GetCompressedFileSizeA SetFileShortNameA GetFullPathNameA WriteProfileStringW SetInformationJobObject GlobalAddAtomA EnumDateFormatsA TerminateJobObject QueryDosDeviceW LeaveCriticalSection GetBinaryTypeW SetCurrentDirectoryA CloseHandle GetFullPathNameW OpenFileMappingA EncodePointer DecodePointer GetStartupInfoW IsProcessorFeaturePresent TlsAlloc TlsSetValue GetCurrentThreadId TlsFree GetModuleHandleW ExitProcess HeapValidate EnterCriticalSection SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetEnvironmentStringsW HeapCreate WriteFile GetACP GetOEMCP GetCPInfo IsValidCodePage RtlUnwind HeapAlloc GetModuleFileNameA HeapReAlloc HeapQueryInformation HeapFree SetFilePointer WideCharToMultiByte WriteConsoleW LCMapStringW GetStringTypeW FlushFileBuffers SetStdHandle CreateFileW

user32

GetMenuItemID GetCursorInfo

gdi32

GetBitmapBits

Sharing

General

Malware Config

Signatures

File Explorer

85d46ceccf9dc3aae4d6989b26a429b11bd4c7e15f572d78e0786e98d2908bfc

kernel32

user32

gdi32

generic