5f22090f07b302d130f809d436cf6c89d488f1144ca3db925a9af3ced7c8acbd

General

Target
5f22090f07b302d130f809d436cf6c89d488f1144ca3db925a9af3ced7c8acbd
Size 239KB
Sample241109-2pgrfstfpn
SHA256 5f22090f07b302d130f809d436cf6c89d488f1144ca3db925a9af3ced7c8acbd
MD5 816f5c3fd7d40c6b8283d0644ae4363c
SHA1 cab9d8421a8a6fe2455880ff77adcaa88e4d94a3
SHA512 6c2610f9afd099484616056d93d40e5fdbebfc3bdaf02af251571ff21e8577f238b9b358108c839e2f15e2ef83da6b07f0771a2581a6742840e5eb461dd94fe7
SSDEEP 3072:49f70CzETNW6kewfq3RVZGRRJQrt6WI5MtbYoTcLDrc4R2OYePBbJPtfRM8rkAFR:4l/eN+fq7Z0JCIKxYMoVbYeP9VnM81f
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5f22090f07b302d130f809d436cf6c89d488f1144ca3db925a9af3ced7c8acbd

File Explorer

5f22090f07b302d130f809d436cf6c89d488f1144ca3db925a9af3ced7c8acbd

.exe 239KB

5f22090f07b302d130f809d436cf6c89d488f1144ca3db925a9af3ced7c8acbd

IMPHASH 62e4c80108c1e602fb1ed5c87f0b3460
SHA256 5f22090f07b302d130f809d436cf6c89d488f1144ca3db925a9af3ced7c8acbd
MD5 816f5c3fd7d40c6b8283d0644ae4363c
SHA1 cab9d8421a8a6fe2455880ff77adcaa88e4d94a3
SHA512 6c2610f9afd099484616056d93d40e5fdbebfc3bdaf02af251571ff21e8577f238b9b358108c839e2f15e2ef83da6b07f0771a2581a6742840e5eb461dd94fe7
SSDEEP 3072:49f70CzETNW6kewfq3RVZGRRJQrt6WI5MtbYoTcLDrc4R2OYePBbJPtfRM8rkAFR:4l/eN+fq7Z0JCIKxYMoVbYeP9VnM81f
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

19591

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\moyo\za.pdb

kernel32

InterlockedCompareExchange AddConsoleAliasW GetLogicalDrives BackupSeek FreeEnvironmentStringsA GetModuleHandleW GetCommConfig VirtualFree ConvertFiberToThread ReadConsoleW GetWindowsDirectoryA EnumTimeFormatsW EnumResourceTypesA LoadLibraryW GetConsoleWindow GetVersionExW GetFileAttributesW EnumSystemLocalesA InterlockedExchange GetProfileIntA GetCPInfoExW SetLastError GetProcAddress VirtualAlloc GetUserDefaultLCID BeginUpdateResourceW RemoveDirectoryA LoadLibraryA LocalAlloc OpenEventA PostQueuedCompletionStatus WriteProfileSectionW FindNextChangeNotification AddAtomA EnumDateFormatsA GetModuleHandleA HeapSetInformation GetStringTypeW GetConsoleTitleW VirtualProtect ScrollConsoleScreenBufferA GetShortPathNameW GetVersionExA DebugBreak EnumCalendarInfoExA QueryPerformanceCounter HeapSize Sleep ExitProcess GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc GetLastError HeapFree RaiseException TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement WriteFile GetStdHandle GetModuleFileNameA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSectionAndSpinCount GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType HeapCreate GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind GetLocaleInfoA LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA

user32

CharLowerBuffW

gdi32

GetBrushOrgEx GetCharWidthI

Sharing

General

Malware Config

Signatures

File Explorer

5f22090f07b302d130f809d436cf6c89d488f1144ca3db925a9af3ced7c8acbd

kernel32

user32

gdi32

generic