df24fcccfb3a2b57db4531c9dd3aa7b0782ac38e3b883af740916f2999bc360e

General

Target
df24fcccfb3a2b57db4531c9dd3aa7b0782ac38e3b883af740916f2999bc360e
Size 1.2MB
Sample241109-2cdh9steld
SHA256 df24fcccfb3a2b57db4531c9dd3aa7b0782ac38e3b883af740916f2999bc360e
MD5 6f9086f11fd3bc196f8aeff8251d5cf6
SHA1 17b5e751f79de87e0f4fba0edbaccae6f7e07e90
SHA512 914a8e54b2314d52f1b5858d00b2d3ba543604fcc85286a46b24642ee8c0d8ede95f0fc149483b8e8971fb1b6155f8f998fd31268c4d906918b5f968cf285540
SSDEEP 24576:i3fA/X9x8NfB7bCvJpAaUQMz5itmXaZH/BV:iISfBnyXAPFQis
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df24fcccfb3a2b57db4531c9dd3aa7b0782ac38e3b883af740916f2999bc360e

File Explorer

df24fcccfb3a2b57db4531c9dd3aa7b0782ac38e3b883af740916f2999bc360e

.exe 1.2MB

df24fcccfb3a2b57db4531c9dd3aa7b0782ac38e3b883af740916f2999bc360e

IMPHASH 8fd8b6e29c7c49d0e2c7d203b8f2c767
SHA256 df24fcccfb3a2b57db4531c9dd3aa7b0782ac38e3b883af740916f2999bc360e
MD5 6f9086f11fd3bc196f8aeff8251d5cf6
SHA1 17b5e751f79de87e0f4fba0edbaccae6f7e07e90
SHA512 914a8e54b2314d52f1b5858d00b2d3ba543604fcc85286a46b24642ee8c0d8ede95f0fc149483b8e8971fb1b6155f8f998fd31268c4d906918b5f968cf285540
SSDEEP 24576:i3fA/X9x8NfB7bCvJpAaUQMz5itmXaZH/BV:iISfBnyXAPFQis
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

28081

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\gabuzu_carudicey_jazipavona_jeh.pdb

kernel32

CreateHardLinkA GetConsoleAliasesA LoadLibraryW IsValidLocale _hread CreateEventA FormatMessageW GetStringTypeExW GetExitCodeProcess lstrcpynW EnumSystemCodePagesA GetFileAttributesW WriteConsoleW WritePrivateProfileSectionW GetLogicalDriveStringsA ChangeTimerQueueTimer SetLastError GetProcAddress LocalAlloc FindAtomA FoldStringA FreeEnvironmentStringsW VirtualProtect GetWindowsDirectoryW GetFileInformationByHandle GlobalReAlloc LCMapStringW CloseHandle CreateFileA GetModuleHandleA LCMapStringA CallNamedPipeA GlobalAddAtomA VirtualAlloc GetVolumeNameForVolumeMountPointA InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree RtlUnwind RaiseException TerminateProcess GetCurrentProcess IsDebuggerPresent HeapAlloc SetHandleCount GetStdHandle GetFileType GetStartupInfoA WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers GetModuleHandleW ExitProcess GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW SetFilePointer InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP SetStdHandle LoadLibraryA

user32

ClientToScreen NotifyWinEvent LoadMenuA InvalidateRgn GetIconInfo GetMenuInfo SetScrollInfo

gdi32

GetGlyphIndicesW

advapi32

RegOpenKeyA

Sharing

General

Malware Config

Signatures

File Explorer

df24fcccfb3a2b57db4531c9dd3aa7b0782ac38e3b883af740916f2999bc360e

kernel32

user32

gdi32

advapi32

generic