2a5d8389b0411a6e98826ffa52f2859af3a022fc3bca8e5da857d0681fb72f8f

General

Target
2a5d8389b0411a6e98826ffa52f2859af3a022fc3bca8e5da857d0681fb72f8f
Size 679KB
Sample241109-3dqqnavblb
SHA256 2a5d8389b0411a6e98826ffa52f2859af3a022fc3bca8e5da857d0681fb72f8f
MD5 418e898abe5a5f945e8621714f287f3d
SHA1 bf8b6de3a84b389e4461654c277b53dd14756f58
SHA512 f9857d8a2840e5f22567e34b91e149e8019bfee26ea74d4887ea8aca8f63cff045a4e4568b05f9d40bd436a3917862cc8dee36f059096e0719e3c685e23de174
SSDEEP 12288:UGHIGD4gZKt4U5Mu3iTTKJ2e32cc8M1o/SldCnGoxkqeYBndoehW8ArY+v4:T/HeDoTKwC2r8mldwGWkCoevSY+A
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a5d8389b0411a6e98826ffa52f2859af3a022fc3bca8e5da857d0681fb72f8f

File Explorer

2a5d8389b0411a6e98826ffa52f2859af3a022fc3bca8e5da857d0681fb72f8f

.exe 679KB

2a5d8389b0411a6e98826ffa52f2859af3a022fc3bca8e5da857d0681fb72f8f

IMPHASH 35d66a6ab4c5b55e6db5dbe109147347
SHA256 2a5d8389b0411a6e98826ffa52f2859af3a022fc3bca8e5da857d0681fb72f8f
MD5 418e898abe5a5f945e8621714f287f3d
SHA1 bf8b6de3a84b389e4461654c277b53dd14756f58
SHA512 f9857d8a2840e5f22567e34b91e149e8019bfee26ea74d4887ea8aca8f63cff045a4e4568b05f9d40bd436a3917862cc8dee36f059096e0719e3c685e23de174
SSDEEP 12288:UGHIGD4gZKt4U5Mu3iTTKJ2e32cc8M1o/SldCnGoxkqeYBndoehW8ArY+v4:T/HeDoTKwC2r8mldwGWkCoevSY+A
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

34329

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\xala kikifuzili\yajumezotali84\wokikox\limasu\yuxezati y.pdb

kernel32

SetDefaultCommConfigW CreateHardLinkA WaitForSingleObjectEx FreeEnvironmentStringsA EnumCalendarInfoExW ReadConsoleW WaitNamedPipeW SetHandleCount LoadLibraryW GetConsoleMode InterlockedPopEntrySList GetStringTypeExW DnsHostnameToComputerNameW lstrcpynW FindNextVolumeW GetFileAttributesW WriteConsoleW GetCompressedFileSizeA CreateActCtxA IsBadStringPtrA WritePrivateProfileStringW GetConsoleAliasesW GetStdHandle ChangeTimerQueueTimer SetLastError GetProcAddress VirtualAlloc EnumSystemCodePagesW GlobalSize SearchPathA LoadLibraryA LocalAlloc AddAtomW BeginUpdateResourceA WriteProfileSectionW FoldStringW EnumResourceTypesW GetModuleFileNameA GetModuleHandleA GetCommTimeouts GetConsoleTitleW QueryPerformanceFrequency GetShortPathNameW DebugBreak ReadConsoleOutputCharacterW DeleteFileA FlushFileBuffers CloseHandle CreateFileA GetConsoleOutputCP WriteConsoleA SetStdHandle GetLocaleInfoW GetConsoleCP GetCommState GetConsoleAliasExesLengthA VirtualQuery FindResourceExW GetNumaProcessorNode CreateMemoryResourceNotification InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree MultiByteToWideChar TerminateProcess GetCurrentProcess IsDebuggerPresent GetStartupInfoW RtlUnwind RaiseException LCMapStringA WideCharToMultiByte LCMapStringW GetCPInfo GetModuleHandleW ExitProcess WriteFile HeapAlloc HeapCreate VirtualFree HeapReAlloc GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeA GetStringTypeW InitializeCriticalSectionAndSpinCount SetFilePointer

user32

ToAsciiEx GetKeyNameTextA LoadMenuA MessageBeep IsWindowEnabled DrawEdge GetScrollInfo GetWindowLongA LoadBitmapW ModifyMenuA

gdi32

GetCharABCWidthsA CreateDiscardableBitmap GetCharWidthI

advapi32

GetEventLogInformation SetKernelObjectSecurity

Sharing

General

Malware Config

Signatures

File Explorer

2a5d8389b0411a6e98826ffa52f2859af3a022fc3bca8e5da857d0681fb72f8f

kernel32

user32

gdi32

advapi32

generic