452a4e8109ac8b873d2d4a22b4c53153557f9de8fa17c35219f17435c5fd0c2e

General

Target
452a4e8109ac8b873d2d4a22b4c53153557f9de8fa17c35219f17435c5fd0c2e
Size 291KB
Sample241109-3vy4csxpbm
SHA256 452a4e8109ac8b873d2d4a22b4c53153557f9de8fa17c35219f17435c5fd0c2e
MD5 fd7556f5bb59cd06ce4ecc86aeaa79b6
SHA1 50a60fabb2b9fc2ed46a8240f04d1980c9f3b519
SHA512 76276bf3a3467c520cedd15d16ded22fc211c2e14dbf1eb4942fe1a66df5e5165392a342598d137aefef2217a143c0228edb362d21a1fadd6db92e1899c2f4f8
SSDEEP 6144:NG4qZMJA2pF8PnJ6aQNHZWdjWHtU9QuV7JphSGH0T:GgFKPMbBZWjT9J7vTc
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/05be33036214692c7fa54f95d974be516d50069de6a75774e7363ce3a5d2e7fc

File Explorer

452a4e8109ac8b873d2d4a22b4c53153557f9de8fa17c35219f17435c5fd0c2e

.zip 291KB
05be33036214692c7fa54f95d974be516d50069de6a75774e7363ce3a5d2e7fc

.exe 383KB

452a4e8109ac8b873d2d4a22b4c53153557f9de8fa17c35219f17435c5fd0c2e

SHA256 452a4e8109ac8b873d2d4a22b4c53153557f9de8fa17c35219f17435c5fd0c2e
MD5 fd7556f5bb59cd06ce4ecc86aeaa79b6
SHA1 50a60fabb2b9fc2ed46a8240f04d1980c9f3b519
SHA512 76276bf3a3467c520cedd15d16ded22fc211c2e14dbf1eb4942fe1a66df5e5165392a342598d137aefef2217a143c0228edb362d21a1fadd6db92e1899c2f4f8
SSDEEP 6144:NG4qZMJA2pF8PnJ6aQNHZWdjWHtU9QuV7JphSGH0T:GgFKPMbBZWjT9J7vTc
MD5 SHA1 SHA512 SSDEEP

05be33036214692c7fa54f95d974be516d50069de6a75774e7363ce3a5d2e7fc

IMPHASH 997a79bbc9b29ccf624aa79059ded875
SHA256 05be33036214692c7fa54f95d974be516d50069de6a75774e7363ce3a5d2e7fc
MD5 034f9e33c7919cbd5a9b2b4f30c9d61d
SHA1 be80cca7a65c5ab50cc47b11a6a157895d3bfb98
SHA512 b312e0cca44d7b6736cf79436760f52f4cb7f5db7e7e005beee2d1c06ee5ffca26a191fc4c5fdbe3c0b38685dfba1940744c79205a8fa9f07f27c5332b4b66fb
SSDEEP 6144:4PLUWMJAapF8PnJ6kCNHZWdjWHjU9QuVhtK8XMBbIr:swjTKPMJNZWjr9J88r
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

14964

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\yemokobowoker\gepotoyehejav\gupelikijakum-l.pdb

kernel32

SetFileApisToOEM SetHandleCount RequestWakeupLatency GetConsoleAliasA GetModuleHandleA CreateDirectoryExW GetLogicalDriveStringsW ReadConsoleInputA FindNextVolumeMountPointA AddAtomA CopyFileExA CallNamedPipeW GetCurrentDirectoryW GetSystemDirectoryA CreateMailslotW TlsGetValue GetProcAddress LocalAlloc GetCommandLineW InterlockedIncrement ConvertDefaultLocale GetConsoleMode FindFirstVolumeW LocalFree GlobalFlags InterlockedDecrement ExitProcess GetCurrencyFormatW BuildCommDCBAndTimeoutsW CreateActCtxW GetConsoleAliasesLengthA GetPrivateProfileIntA _lread SetVolumeMountPointW EnumResourceLanguagesW LoadModule lstrlenW CreateDirectoryA GlobalFindAtomW CopyFileW VerSetConditionMask CreateMutexW DeactivateActCtx GetDiskFreeSpaceA MoveFileA SetEvent MoveFileExW FindResourceW SetFileTime SetFilePointer FindFirstFileA EnumResourceLanguagesA InterlockedCompareExchange FreeEnvironmentStringsA InterlockedExchangeAdd GetModuleHandleW SetLastError GetLogicalDrives EnumDateFormatsW OpenMutexA OpenJobObjectW LoadLibraryA GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree CloseHandle EnterCriticalSection LeaveCriticalSection HeapAlloc Sleep WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetFileType GetStartupInfoA DeleteCriticalSection TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime VirtualAlloc HeapReAlloc SetStdHandle WideCharToMultiByte GetConsoleCP FlushFileBuffers RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize CreateFileA

user32

DrawCaption

gdi32

GetBrushOrgEx

advapi32

InitiateSystemShutdownW

Sharing

General

Malware Config

Signatures

File Explorer

452a4e8109ac8b873d2d4a22b4c53153557f9de8fa17c35219f17435c5fd0c2e

05be33036214692c7fa54f95d974be516d50069de6a75774e7363ce3a5d2e7fc

kernel32

user32

gdi32

advapi32

generic