476aa58a0e59a9a9681a8a50ab70429455945624f26b5ac52b17fb860eef5722

General

Target
476aa58a0e59a9a9681a8a50ab70429455945624f26b5ac52b17fb860eef5722
Size 445KB
Sample241109-3gkc2stmcw
SHA256 476aa58a0e59a9a9681a8a50ab70429455945624f26b5ac52b17fb860eef5722
MD5 292f8e5048b6ed8d6086bea03ccfe5fa
SHA1 d1ad8fe3d5ad5449586268ac67ac99674a25c04c
SHA512 ceb99665e1b21a8072a7aef68bb88c8bb6d4443140f0e18bf0d59d701adf85fd23e6a746037c27485f6df0090f101edcce5912a127b3fff7f607643e7aa7bd25
SSDEEP 12288:RieYn2u+Pwu62hWGnSz3vEUBR5Iemb+yE:RJu+Pwu9/Sggqbr
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
476aa58a0e59a9a9681a8a50ab70429455945624f26b5ac52b17fb860eef5722

File Explorer

476aa58a0e59a9a9681a8a50ab70429455945624f26b5ac52b17fb860eef5722

.exe 445KB

476aa58a0e59a9a9681a8a50ab70429455945624f26b5ac52b17fb860eef5722

IMPHASH 4bb8a39044d1acb8817ffc34236f365c
SHA256 476aa58a0e59a9a9681a8a50ab70429455945624f26b5ac52b17fb860eef5722
MD5 292f8e5048b6ed8d6086bea03ccfe5fa
SHA1 d1ad8fe3d5ad5449586268ac67ac99674a25c04c
SHA512 ceb99665e1b21a8072a7aef68bb88c8bb6d4443140f0e18bf0d59d701adf85fd23e6a746037c27485f6df0090f101edcce5912a127b3fff7f607643e7aa7bd25
SSDEEP 12288:RieYn2u+Pwu62hWGnSz3vEUBR5Iemb+yE:RJu+Pwu9/Sggqbr
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

226880

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\xediyolu putecuber\sijehu.pdb

kernel32

TerminateProcess GetExitCodeProcess GetVersionExA VerifyVersionInfoA CopyFileExW GetConsoleMode GetConsoleCP VerLanguageNameA GetDriveTypeW FindFirstChangeNotificationW FreeEnvironmentStringsW RequestWakeupLatency SetVolumeMountPointA GetLongPathNameW CopyFileW TlsGetValue SetConsoleCursorInfo LocalHandle SystemTimeToTzSpecificLocalTime SetProcessShutdownParameters MultiByteToWideChar LocalUnlock GetNamedPipeHandleStateW BuildCommDCBAndTimeoutsA GetProcAddress GetModuleHandleA GlobalAlloc Sleep MoveFileA GetCommandLineW InterlockedDecrement DeleteFileW GetVolumePathNamesForVolumeNameA GetPrivateProfileStringW GetPrivateProfileIntA HeapSize GetProcessHeaps CreateNamedPipeA GetEnvironmentVariableA GetCPInfoExA GetSystemWindowsDirectoryA GetSystemWow64DirectoryA WriteProfileSectionW GetCalendarInfoA GetLastError GetExitCodeThread WaitForDebugEvent ReadFileScatter ReadFile GetDefaultCommConfigA GetNumberOfConsoleMouseButtons GlobalWire WritePrivateProfileSectionW TerminateThread WriteProfileStringA lstrcatW FindCloseChangeNotification CreateActCtxA InterlockedPopEntrySList OutputDebugStringW InterlockedExchange SetConsoleTitleW DefineDosDeviceW LoadLibraryW WritePrivateProfileStringW WaitNamedPipeW InterlockedIncrement GetPrivateProfileStringA SetConsoleMode PeekConsoleInputA GetNumberFormatA FindFirstVolumeW LoadModule GetPrivateProfileSectionNamesA EnumTimeFormatsA SetLocalTime CreateSemaphoreA FindNextFileA FindFirstFileW FreeEnvironmentStringsA OutputDebugStringA lstrcpyW HeapSetInformation CreateHardLinkW SetThreadExecutionState GetSystemTime LockFile EnumCalendarInfoExA MoveFileExW SetConsoleScreenBufferSize SearchPathW IsBadStringPtrW GetAtomNameW GetConsoleAliasExesLengthA WriteConsoleInputA LocalLock SetCommConfig _lopen EnumSystemLocalesA GetNumaHighestNodeNumber SetEndOfFile GetWriteWatch UnhandledExceptionFilter OpenSemaphoreA GetConsoleScreenBufferInfo GetProfileStringW ZombifyActCtx GetVolumePathNamesForVolumeNameW SetSystemTimeAdjustment GetComputerNameA HeapCompact CommConfigDialogA OpenMutexA GetStringTypeA SetSystemPowerState FindResourceA DeleteTimerQueueTimer EnumResourceNamesW CreateTimerQueueTimer GetProcessTimes UnregisterWait IsBadWritePtr GetCurrentProcessId FatalAppExitW GetFileAttributesW lstrcpynW DisconnectNamedPipe WriteConsoleOutputAttribute GetCompressedFileSizeA SetFileShortNameA GetFullPathNameW WriteProfileStringW SetInformationJobObject GlobalAddAtomA TerminateJobObject QueryDosDeviceW LeaveCriticalSection SetCurrentDirectoryA EnumDateFormatsW GetBinaryTypeW CloseHandle CreateSemaphoreW OpenFileMappingA EncodePointer DecodePointer GetStartupInfoW IsProcessorFeaturePresent TlsAlloc TlsSetValue GetCurrentThreadId TlsFree GetModuleHandleW SetLastError ExitProcess HeapValidate IsBadReadPtr EnterCriticalSection SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection GetCurrentProcess SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetEnvironmentStringsW HeapCreate WriteFile GetACP GetOEMCP GetCPInfo IsValidCodePage RaiseException RtlUnwind HeapAlloc GetModuleFileNameA HeapReAlloc HeapQueryInformation HeapFree SetFilePointer WideCharToMultiByte WriteConsoleW LCMapStringW GetStringTypeW FlushFileBuffers SetStdHandle CreateFileW

user32

GetMenuItemID GetCursorInfo

gdi32

GetBitmapBits

Sharing

General

Malware Config

Signatures

File Explorer

476aa58a0e59a9a9681a8a50ab70429455945624f26b5ac52b17fb860eef5722

kernel32

user32

gdi32

generic