53c3ee066344f4b95c71384d3f846471be1ce88df4b22adb5b23e7872384e94c

General

Target
53c3ee066344f4b95c71384d3f846471be1ce88df4b22adb5b23e7872384e94c
Size 433KB
Sample241109-cer21avdlf
SHA256 53c3ee066344f4b95c71384d3f846471be1ce88df4b22adb5b23e7872384e94c
MD5 ac9966dd9f7340d95a927a6822dd0ae5
SHA1 e5f69d40f5b7c9b57573182924758e3a9f0e2f5d
SHA512 aea15ce4808c636c92376b0d5d3496de194b5858173578ce9a02d41b53784f5433c55078f7e337900df191cd8e39ede41dcbbf334123ceb0babc304bf9884474
SSDEEP 6144:gkzT5Nf9ZbDnOgfq1HjKNi+Hn33b8poHwiMc4oKoN3:fT5XZ+gfqdjKNdHn33bAoHwQ4oKM
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
53c3ee066344f4b95c71384d3f846471be1ce88df4b22adb5b23e7872384e94c

File Explorer

53c3ee066344f4b95c71384d3f846471be1ce88df4b22adb5b23e7872384e94c

.exe 433KB

53c3ee066344f4b95c71384d3f846471be1ce88df4b22adb5b23e7872384e94c

IMPHASH 9cae6f4a76061b40bb99bdb1c364f1a9
SHA256 53c3ee066344f4b95c71384d3f846471be1ce88df4b22adb5b23e7872384e94c
MD5 ac9966dd9f7340d95a927a6822dd0ae5
SHA1 e5f69d40f5b7c9b57573182924758e3a9f0e2f5d
SHA512 aea15ce4808c636c92376b0d5d3496de194b5858173578ce9a02d41b53784f5433c55078f7e337900df191cd8e39ede41dcbbf334123ceb0babc304bf9884474
SSDEEP 6144:gkzT5Nf9ZbDnOgfq1HjKNi+Hn33b8poHwiMc4oKoN3:fT5XZ+gfqdjKNdHn33bAoHwQ4oKM
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

223552

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\jevenisim.pdb

kernel32

FindFirstVolumeW WaitForSingleObject GetNamedPipeHandleStateA CreateNamedPipeW CallNamedPipeW TerminateProcess FatalExit GetVersionExA CopyFileExW SetConsoleCP VerifyVersionInfoA VerLanguageNameW FindFirstFileExW FreeEnvironmentStringsW SetProcessPriorityBoost SetVolumeMountPointA GetLongPathNameW CopyFileA TlsGetValue VerifyVersionInfoW GetConsoleCursorInfo SystemTimeToTzSpecificLocalTime GetProcessShutdownParameters ReleaseSemaphore BuildCommDCBAndTimeoutsW GetProcAddress GetModuleHandleA GlobalAlloc Sleep MoveFileW GetCommandLineA InterlockedDecrement DeleteFileA GetVolumePathNamesForVolumeNameW SetFileAttributesA GetPrivateProfileIntW HeapSize GetProcessHeap CreateNamedPipeA WriteConsoleOutputW GetStartupInfoW GetDiskFreeSpaceExW GetCPInfoExW GetWindowsDirectoryA GetSystemWow64DirectoryA GetProfileStringW GetCalendarInfoA SetLastError GetExitCodeThread DebugBreak ReadFileScatter ReadFile SetDefaultCommConfigA GetNumberOfConsoleMouseButtons GlobalWire GetSystemWow64DirectoryW WriteProfileStringA lstrcatW FindCloseChangeNotification CreateActCtxA InterlockedPopEntrySList OutputDebugStringW InterlockedExchange DefineDosDeviceA LoadLibraryA WriteConsoleW SetSystemTimeAdjustment GetConsoleMode SetErrorMode UnregisterWaitEx PeekConsoleInputA GetNumberFormatA GetQueuedCompletionStatus FindResourceExA FindNextFileW FindFirstFileA FreeEnvironmentStringsA SetLocalTime EnumTimeFormatsW CreateSemaphoreW HeapSetInformation SetFileShortNameA lstrcpyA HeapWalk CreateHardLinkA RaiseException SetSystemTime LockFile EnumCalendarInfoExW MoveFileExW GetConsoleCP SetConsoleScreenBufferSize SearchPathW FreeConsole GetAtomNameW GetConsoleAliasExesLengthW WriteConsoleInputW LocalLock EnumDateFormatsW SetCommState GetSystemTimeAdjustment EnumSystemLocalesW GetNumaHighestNodeNumber SetEndOfFile GetWriteWatch SetUnhandledExceptionFilter OpenSemaphoreW GetLargestConsoleWindowSize ClearCommError ReleaseActCtx GetComputerNameA HeapValidate GetLastError OpenMutexW GetStringTypeA SetSystemPowerState VirtualUnlock SetWaitableTimer EnumResourceNamesA CreateTimerQueueTimer GetProcessTimes RegisterWaitForSingleObject IsBadWritePtr GetCurrentProcessId FatalAppExitA GetFileAttributesW lstrcpynW DisconnectNamedPipe FillConsoleOutputCharacterA GetCompressedFileSizeA FindNextVolumeMountPointW GetFullPathNameA WriteProfileStringW LockFileEx LeaveCriticalSection SetCurrentDirectoryA GlobalAddAtomW CloseHandle CreateFileW EncodePointer DecodePointer GetCommandLineW IsProcessorFeaturePresent TlsAlloc TlsSetValue GetCurrentThreadId TlsFree GetModuleHandleW InterlockedIncrement ExitProcess IsBadReadPtr GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW WriteFile GetStdHandle QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection HeapCreate GetACP GetOEMCP GetCPInfo IsValidCodePage EnterCriticalSection RtlUnwind LoadLibraryW HeapAlloc GetModuleFileNameA HeapReAlloc HeapQueryInformation HeapFree WideCharToMultiByte LCMapStringW MultiByteToWideChar GetStringTypeW OutputDebugStringA SetFilePointer SetStdHandle FlushFileBuffers

user32

GetMenuItemID

Sharing

General

Malware Config

Signatures

File Explorer

53c3ee066344f4b95c71384d3f846471be1ce88df4b22adb5b23e7872384e94c

kernel32

user32

generic