d3d56e6fe3141a848552a9c415cddbce53927694e9376dd5e88dfe4e07fd7dd5

General

Target
d3d56e6fe3141a848552a9c415cddbce53927694e9376dd5e88dfe4e07fd7dd5
Size 446KB
Sample241109-e2syxsxflr
SHA256 d3d56e6fe3141a848552a9c415cddbce53927694e9376dd5e88dfe4e07fd7dd5
MD5 5773b9e61e228291d2782b3cb9f3f887
SHA1 cbda5f4a76911a0b3c773d62fa0ad35cef0b5147
SHA512 231d9e0e1e1670d5d35742d0397b91e25e7add9c41099bde6731015ac25928e423ed583c8a965c7315c355309dda94a2f317a9c25888f600369ff40b5b3cbb8c
SSDEEP 12288:xSgreJ4MJ8i7EB37Wk4pi5W0mPpg9VfI:xMJ4MJXwN77C0mPpa
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3d56e6fe3141a848552a9c415cddbce53927694e9376dd5e88dfe4e07fd7dd5

File Explorer

d3d56e6fe3141a848552a9c415cddbce53927694e9376dd5e88dfe4e07fd7dd5

.exe 446KB

d3d56e6fe3141a848552a9c415cddbce53927694e9376dd5e88dfe4e07fd7dd5

IMPHASH f9c2e6a1a2085a9fa6c1b7d773af20c4
SHA256 d3d56e6fe3141a848552a9c415cddbce53927694e9376dd5e88dfe4e07fd7dd5
MD5 5773b9e61e228291d2782b3cb9f3f887
SHA1 cbda5f4a76911a0b3c773d62fa0ad35cef0b5147
SHA512 231d9e0e1e1670d5d35742d0397b91e25e7add9c41099bde6731015ac25928e423ed583c8a965c7315c355309dda94a2f317a9c25888f600369ff40b5b3cbb8c
SSDEEP 12288:xSgreJ4MJ8i7EB37Wk4pi5W0mPpg9VfI:xMJ4MJXwN77C0mPpa
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

226544

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\soco-janoxib.pdb

kernel32

FindFirstVolumeA WaitForSingleObject GetNamedPipeHandleStateA CreateNamedPipeW CallNamedPipeW TerminateThread FatalExit GetVersionExA CopyFileExW SetConsoleCP VerifyVersionInfoA VerLanguageNameA FindFirstFileExW FreeEnvironmentStringsW SetProcessPriorityBoost SetVolumeMountPointA GetLongPathNameW CopyFileA TlsSetValue VerifyVersionInfoW GetConsoleCursorInfo TzSpecificLocalTimeToSystemTime GetProcessShutdownParameters ReleaseSemaphore BuildCommDCBAndTimeoutsW GetProcAddress GetModuleHandleA GlobalAlloc Sleep TlsGetValue MoveFileW GetCommandLineW InterlockedExchange DeleteFileA CreateActCtxW SetFileAttributesA GetPrivateProfileIntW HeapValidate GetProcessHeap CreateNamedPipeA WriteConsoleOutputW GetStartupInfoA GetDiskFreeSpaceExW GetCPInfoExW GetWindowsDirectoryA GetSystemWow64DirectoryA SetLastError GetProfileStringW GetCalendarInfoA GetTickCount GetExitCodeThread DebugBreak FindFirstFileA ReadFileScatter ReadFile GetNumberOfConsoleMouseButtons GetSystemWow64DirectoryW WriteProfileStringA lstrcatW CreateActCtxA InterlockedPopEntrySList DefineDosDeviceA WriteConsoleW InterlockedDecrement SetSystemTimeAdjustment HeapWalk SetErrorMode PeekConsoleInputA GetNumberFormatW GetQueuedCompletionStatus FreeEnvironmentStringsA SetLocalTime FindResourceExW CreateSemaphoreW HeapSetInformation SetFileShortNameA lstrcpyA ReplaceFileW LockFile MoveFileExW GetConsoleCP GetVolumePathNameW SetConsoleScreenBufferSize FreeConsole GetConsoleAliasExesLengthW WriteConsoleInputW LocalLock SetCommState GetSystemTimeAdjustment EnumSystemLocalesW GetNumaHighestNodeNumber SetEndOfFile ChangeTimerQueueTimer GetWriteWatch RaiseException OpenSemaphoreW GetLargestConsoleWindowSize ClearCommError ReleaseActCtx GetComputerNameW GetLastError OpenMutexW GetStringTypeA VirtualUnlock SetWaitableTimer CreateTimerQueueTimer GetProcessTimes IsBadWritePtr FatalAppExitA lstrcpynW SetNamedPipeHandleState FillConsoleOutputCharacterW GetCompressedFileSizeA FindNextVolumeMountPointW GetFullPathNameA WriteProfileStringW LockFileEx LeaveCriticalSection SetCurrentDirectoryA GlobalAddAtomW ReadFileEx EncodePointer DecodePointer GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW IsBadReadPtr IsProcessorFeaturePresent TlsAlloc GetCurrentThreadId TlsFree GetModuleHandleW InterlockedIncrement ExitProcess WriteFile GetStdHandle EnterCriticalSection SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW HeapCreate SetFilePointer WideCharToMultiByte GetConsoleMode OutputDebugStringA OutputDebugStringW LoadLibraryW MultiByteToWideChar GetACP GetOEMCP GetCPInfo IsValidCodePage HeapAlloc GetModuleFileNameA HeapReAlloc HeapSize HeapQueryInformation HeapFree RtlUnwind SetStdHandle GetStringTypeW LCMapStringW FlushFileBuffers CreateFileW CloseHandle

user32

GetComboBoxInfo GetAltTabInfoA

Sharing

General

Malware Config

Signatures

File Explorer

d3d56e6fe3141a848552a9c415cddbce53927694e9376dd5e88dfe4e07fd7dd5

kernel32

user32

generic