cb5fe5f824bff23d7f954691b622b103876651b1c34a3d95be3a3b8f9cb4e309

General

Target
cb5fe5f824bff23d7f954691b622b103876651b1c34a3d95be3a3b8f9cb4e309
Size 300KB
Sample241109-2ce24aspfz
SHA256 cb5fe5f824bff23d7f954691b622b103876651b1c34a3d95be3a3b8f9cb4e309
MD5 65b71456b50e85da1da591f19efcabac
SHA1 801418b86d48aa8a4891b4e626e379176c8e5029
SHA512 b185ef98e0f706a1578afc380623d278aa4790dc2d227cf82134f4d73f3f12931ee76c35e879de3a56adb635dae0046eb2b0e4957edd021022912a0a79b50284
SSDEEP 6144:7yMNFlFQULpGET3iB1ELMa59MiCwDYYy3lnBi:2MrZpGETSB1ELMwMiCwDq5B
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cb5fe5f824bff23d7f954691b622b103876651b1c34a3d95be3a3b8f9cb4e309

File Explorer

cb5fe5f824bff23d7f954691b622b103876651b1c34a3d95be3a3b8f9cb4e309

.exe 300KB

cb5fe5f824bff23d7f954691b622b103876651b1c34a3d95be3a3b8f9cb4e309

IMPHASH cd2e8aca313b88a16bc7b305a3f26143
SHA256 cb5fe5f824bff23d7f954691b622b103876651b1c34a3d95be3a3b8f9cb4e309
MD5 65b71456b50e85da1da591f19efcabac
SHA1 801418b86d48aa8a4891b4e626e379176c8e5029
SHA512 b185ef98e0f706a1578afc380623d278aa4790dc2d227cf82134f4d73f3f12931ee76c35e879de3a56adb635dae0046eb2b0e4957edd021022912a0a79b50284
SSDEEP 6144:7yMNFlFQULpGET3iB1ELMa59MiCwDYYy3lnBi:2MrZpGETSB1ELMwMiCwDq5B
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

101968

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\wubobehowugefa_bus-milivah\lucitob\wesaj\guje\8\vomusihamit.pdb

kernel32

OpenFileMappingA FindFirstVolumeW TerminateProcess FatalExit GetVersionExA CopyFileExA GetConsoleCP VerifyVersionInfoA VerLanguageNameW GetDriveTypeW FindFirstChangeNotificationA FreeEnvironmentStringsW GetProcessPriorityBoost SetVolumeMountPointA GetLongPathNameA CopyFileW TlsGetValue VerifyVersionInfoW GetConsoleCursorInfo SystemTimeToTzSpecificLocalTime GetProcessShutdownParameters MultiByteToWideChar GetNamedPipeHandleStateA BuildCommDCBAndTimeoutsW GetProcAddress GetModuleHandleA GlobalAlloc Sleep MoveFileW GetCommandLineA InterlockedDecrement DeleteFileW GetVolumePathNamesForVolumeNameW GetPrivateProfileStringA GetPrivateProfileIntA HeapSize GetProcessHeap CreateNamedPipeA SetFileShortNameW GetStartupInfoW GetEnvironmentVariableA GetCPInfoExA GetWindowsDirectoryA GetSystemWow64DirectoryA GetLastError WriteProfileSectionW GetCalendarInfoW SetLastError GetExitCodeThread DebugBreak FindFirstFileA ReadFileScatter ReadFile SetDefaultCommConfigA GetNumberOfConsoleMouseButtons GlobalWire WritePrivateProfileSectionA WriteProfileStringA lstrcatW FindCloseChangeNotification CreateActCtxW InterlockedPopEntrySList InterlockedExchange SetConsoleTitleW DefineDosDeviceW LoadLibraryA WritePrivateProfileStringA WaitNamedPipeW GetConsoleMode HeapSetInformation UnregisterWait PeekConsoleInputA GetNumberFormatA DeleteFileA LoadModule GetPrivateProfileSectionNamesW FindResourceExA EnumTimeFormatsA SetLocalTime FindNextFileA FindFirstFileW FreeEnvironmentStringsA CreateSemaphoreW OutputDebugStringW SetFileShortNameA lstrcpyW HeapWalk CreateHardLinkW RaiseException GetSystemTime UnlockFile EnumCalendarInfoExA MoveFileExA SetConsoleScreenBufferSize SearchPathW IsBadStringPtrW GetAtomNameA GetConsoleAliasExesLengthA WriteConsoleInputW LocalLock SetCommState EnumSystemLocalesA GetNumaHighestNodeNumber SetEndOfFile ResetWriteWatch SetUnhandledExceptionFilter OpenSemaphoreW GetLargestConsoleWindowSize GetProfileStringW ReleaseActCtx EnumDateFormatsW SetSystemTimeAdjustment OpenMutexW GetComputerNameA HeapValidate CommConfigDialogA OpenMutexA GetStringTypeA SetSystemPowerState FindResourceW SetTimerQueueTimer EnumResourceNamesW GetProcessTimes RegisterWaitForSingleObject IsBadReadPtr GetCurrentProcessId FatalAppExitW GetFileAttributesW lstrcpynW DisconnectNamedPipe FillConsoleOutputCharacterA GetCompressedFileSizeA GetFullPathNameA WriteProfileStringW SetInformationJobObject GlobalAddAtomA EnumDateFormatsA TerminateJobObject QueryDosDeviceA LeaveCriticalSection SetCurrentDirectoryA CreateTimerQueueTimer GetBinaryTypeA CloseHandle CreateFileW SetStdHandle EncodePointer DecodePointer GetCommandLineW TlsAlloc TlsSetValue GetCurrentThreadId TlsFree GetModuleHandleW InterlockedIncrement IsProcessorFeaturePresent QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime ExitProcess GetModuleFileNameW GetEnvironmentStringsW SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection HeapCreate WriteFile GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection GetACP GetOEMCP GetCPInfo IsValidCodePage RtlUnwind LoadLibraryW HeapAlloc GetModuleFileNameA HeapReAlloc HeapQueryInformation HeapFree WideCharToMultiByte LCMapStringW GetStringTypeW OutputDebugStringA WriteConsoleW SetFilePointer FlushFileBuffers

user32

GetMenuItemID GetCursorInfo

Sharing

General

Malware Config

Signatures

File Explorer

cb5fe5f824bff23d7f954691b622b103876651b1c34a3d95be3a3b8f9cb4e309

kernel32

user32

generic