12bacde84fa6d4b0b6cda28e077db2f529ab7d48a5fcc9ec797cdd4710fdc08e

General

Target
12bacde84fa6d4b0b6cda28e077db2f529ab7d48a5fcc9ec797cdd4710fdc08e
Size 273KB
Sample241109-c8bl4svmbz
SHA256 12bacde84fa6d4b0b6cda28e077db2f529ab7d48a5fcc9ec797cdd4710fdc08e
MD5 d379cb51591a32a1fb3856ccff90d01e
SHA1 94101a96a76828d2d9d25b39185f99bc90d3ca51
SHA512 4da529d7eb9ddae9cda8119ea46144810b6289586e40f42df2e31a145210778060872f46c58710f2cb45e76dd1b25c68a18e412e4c20b483f43f729020e7bb2a
SSDEEP 6144:i8qL1OPq8uDd1iFrjAF8X6wca3noINCeGFwB:5qcPqFMrjAKKwcWoV6
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12bacde84fa6d4b0b6cda28e077db2f529ab7d48a5fcc9ec797cdd4710fdc08e

File Explorer

12bacde84fa6d4b0b6cda28e077db2f529ab7d48a5fcc9ec797cdd4710fdc08e

.exe 273KB

12bacde84fa6d4b0b6cda28e077db2f529ab7d48a5fcc9ec797cdd4710fdc08e

IMPHASH 3860216a9c8a22406256ad863e468f18
SHA256 12bacde84fa6d4b0b6cda28e077db2f529ab7d48a5fcc9ec797cdd4710fdc08e
MD5 d379cb51591a32a1fb3856ccff90d01e
SHA1 94101a96a76828d2d9d25b39185f99bc90d3ca51
SHA512 4da529d7eb9ddae9cda8119ea46144810b6289586e40f42df2e31a145210778060872f46c58710f2cb45e76dd1b25c68a18e412e4c20b483f43f729020e7bb2a
SSDEEP 6144:i8qL1OPq8uDd1iFrjAF8X6wca3noINCeGFwB:5qcPqFMrjAKKwcWoV6
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

7039

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\nilef\bixa\76\kejaj.pdb

kernel32

SetDefaultCommConfigA WriteConsoleInputW GetLocaleInfoA FindResourceExW WaitForSingleObject SetVolumeMountPointW EnumCalendarInfoExW GetConsoleAliasesA ActivateActCtx TerminateThread SwitchToFiber GetProcessHandleCount GetVersionExW GetConsoleAliasW FileTimeToSystemTime ReplaceFileA GetConsoleAliasesW GetLastError GetProcAddress VirtualAlloc HeapSize GetComputerNameExW WriteConsoleA LocalAlloc GetModuleHandleA GetStringTypeW GetConsoleTitleW ResetWriteWatch HeapAlloc MultiByteToWideChar UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW TerminateProcess GetCurrentProcess IsDebuggerPresent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind LoadLibraryA LCMapStringA WideCharToMultiByte LCMapStringW GetStringTypeA RaiseException

winhttp

WinHttpSetOption

Sharing

General

Malware Config

Signatures

File Explorer

12bacde84fa6d4b0b6cda28e077db2f529ab7d48a5fcc9ec797cdd4710fdc08e

kernel32

winhttp

generic