799e696bf7f3043273b159683dd3e2c1cad9bf0e505506f66e5db3b70d91a3f2

General

Target
799e696bf7f3043273b159683dd3e2c1cad9bf0e505506f66e5db3b70d91a3f2
Size 333KB
Sample241109-3pykmstnet
SHA256 799e696bf7f3043273b159683dd3e2c1cad9bf0e505506f66e5db3b70d91a3f2
MD5 920948a8f0b1841bc21961b458a8cfb7
SHA1 08d5b94cdcb0b3e846d621e64d75fff48007868c
SHA512 aeb74dddeb976bfbac59c8c5daa083cba1935f868c740bce12f435d901a991ae040008da50d7a95eb231c3ead342ec5db5d5511f8e46db7ae712748e74b81d0f
SSDEEP 6144:yZ3LYwHUxsB2a9D4lJERA0Cr4x+WBQYLwzAW0nr:yZ38wHU2BsCi0R+Weowar
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
799e696bf7f3043273b159683dd3e2c1cad9bf0e505506f66e5db3b70d91a3f2

File Explorer

799e696bf7f3043273b159683dd3e2c1cad9bf0e505506f66e5db3b70d91a3f2

.exe 333KB

799e696bf7f3043273b159683dd3e2c1cad9bf0e505506f66e5db3b70d91a3f2

IMPHASH 9c97db954c6eab8dfde4a4fd207d98cc
SHA256 799e696bf7f3043273b159683dd3e2c1cad9bf0e505506f66e5db3b70d91a3f2
MD5 920948a8f0b1841bc21961b458a8cfb7
SHA1 08d5b94cdcb0b3e846d621e64d75fff48007868c
SHA512 aeb74dddeb976bfbac59c8c5daa083cba1935f868c740bce12f435d901a991ae040008da50d7a95eb231c3ead342ec5db5d5511f8e46db7ae712748e74b81d0f
SSDEEP 6144:yZ3LYwHUxsB2a9D4lJERA0Cr4x+WBQYLwzAW0nr:yZ38wHU2BsCi0R+Weowar
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

20680

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\tugiwozexe-hon68\xozutuboreja.pdb

kernel32

GetLogicalDriveStringsW SetDefaultCommConfigW CreateHardLinkA GetConsoleAliasesA LoadLibraryW _hread IsBadCodePtr CreateEventA FormatMessageW GetFileAttributesA GetExitCodeProcess SetConsoleMode WriteConsoleW WritePrivateProfileSectionW ChangeTimerQueueTimer SetLastError GetProcAddress GlobalAddAtomA EnumSystemCodePagesW LocalAlloc FoldStringA FreeEnvironmentStringsW VirtualProtect GetWindowsDirectoryW GetFileInformationByHandle GlobalReAlloc InterlockedPushEntrySList LCMapStringW CloseHandle CreateFileA HeapSize lstrcpynA CallNamedPipeA VirtualAlloc GetVolumeNameForVolumeMountPointA GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc GetLastError HeapFree EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc InitializeCriticalSectionAndSpinCount RtlUnwind MultiByteToWideChar LoadLibraryA SetStdHandle WriteConsoleA GetConsoleOutputCP LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers RaiseException

user32

ClientToScreen LoadMenuA InvalidateRgn GetMenuInfo MessageBoxIndirectW CountClipboardFormats SetScrollInfo

gdi32

GetGlyphIndicesW

advapi32

RegOpenKeyA

Sharing

General

Malware Config

Signatures

File Explorer

799e696bf7f3043273b159683dd3e2c1cad9bf0e505506f66e5db3b70d91a3f2

kernel32

user32

gdi32

advapi32

generic