c34e045a064988e362e72970b2c8f067c99a6b48

Sharing

Copy URL Twitter E-mail

General

Target
c34e045a064988e362e72970b2c8f067c99a6b48
Size 377KB
Sample241109-31bv1sxphp
SHA256 44208647d6d3358280c54fb8b19bfa5528d01fddf9415637ea4a7c4cdcc2a777
MD5 6d27578850ddf860b0ce547e91c6c0bd
SHA1 c34e045a064988e362e72970b2c8f067c99a6b48
SHA512 4cd3f11aa5f8ef80142f5f7cd29a6be07bd47d0159b62faa59e142a956a17888cb71f82f6a54e8e5554c0c62d9460e63f85d12e27cb7584957d385e4bcfb2847
SSDEEP 6144:8Clzi9/MaL1wX8O2oJXVW0cYKpfOGhz4D+z56h8QWHU:8Clzi9rBwX8hoJX4RPGGyDs6hU
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c34e045a064988e362e72970b2c8f067c99a6b48

File Explorer

c34e045a064988e362e72970b2c8f067c99a6b48

.exe 377KB

c34e045a064988e362e72970b2c8f067c99a6b48

IMPHASH faaf45f51400f48ccc9484bc4fae33cf
SHA256 44208647d6d3358280c54fb8b19bfa5528d01fddf9415637ea4a7c4cdcc2a777
MD5 6d27578850ddf860b0ce547e91c6c0bd
SHA1 c34e045a064988e362e72970b2c8f067c99a6b48
SHA512 4cd3f11aa5f8ef80142f5f7cd29a6be07bd47d0159b62faa59e142a956a17888cb71f82f6a54e8e5554c0c62d9460e63f85d12e27cb7584957d385e4bcfb2847
SSDEEP 6144:8Clzi9/MaL1wX8O2oJXVW0cYKpfOGhz4D+z56h8QWHU:8Clzi9rBwX8hoJX4RPGGyDs6hU
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

21984

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\vejakut\dic.pdb

kernel32

ReadConsoleA HeapFree AddConsoleAliasW GetProcessHeap GlobalAlloc GetSystemDirectoryW LoadLibraryW SetVolumeMountPointA GetVersionExW GetAtomNameW ReplaceFileA GetPrivateProfileIntW ReleaseActCtx GetStdHandle SetLastError VirtualAlloc AllocConsole LoadLibraryA WriteConsoleA SetCalendarInfoW SetConsoleCtrlHandler SetEnvironmentVariableA GetModuleFileNameA GetDefaultCommConfigA GetModuleHandleA FreeEnvironmentStringsW GetConsoleTitleW VirtualProtect CompareStringA GetCPInfoExA CloseHandle CreateFileA lstrlenA GetConsoleAliasesLengthW FindFirstChangeNotificationW LocalUnlock GetLocaleInfoA GetLastError UnhandledExceptionFilter SetUnhandledExceptionFilter GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess IsDebuggerPresent HeapAlloc HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc GetModuleHandleW GetProcAddress TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement Sleep HeapSize ExitProcess WriteFile SetFilePointer FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount MultiByteToWideChar SetStdHandle FlushFileBuffers GetConsoleOutputCP WriteConsoleW LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW

user32

WindowFromPoint

gdi32

GetFontUnicodeRanges

advapi32

GetOldestEventLogRecord

winhttp

WinHttpCloseHandle

msimg32

AlphaBlend

Sharing

General

Malware Config

Signatures

File Explorer

c34e045a064988e362e72970b2c8f067c99a6b48

kernel32

user32

gdi32

advapi32

winhttp

msimg32

generic