dc66cdf44e7cd93052f2f85ec54663a2e64b38c257826d5b95179386d6a53a5d

General

Target
dc66cdf44e7cd93052f2f85ec54663a2e64b38c257826d5b95179386d6a53a5d
Size 394KB
Sample241109-fe4ycaxhnd
SHA256 dc66cdf44e7cd93052f2f85ec54663a2e64b38c257826d5b95179386d6a53a5d
MD5 59514acaf309ffbeb730995b6104dab7
SHA1 f8c0358889f31e16629ee858ad1be97aff8b4d60
SHA512 c56cf9e9b757618a27936a6493b59b90b3c2a3f1cbe10ad910670abfab58a279703a2f88f9825bb80a8906606ceaa2df48e9e64f3e8e53a4782e368311c9e431
SSDEEP 6144:JvY/hfaNsYeaDDHBYolh5nkRAnlEJa7xwZ124+JXerMchss+x1UkUV:iht/a3HuUMRu7xw7f+h/wss+ck
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc66cdf44e7cd93052f2f85ec54663a2e64b38c257826d5b95179386d6a53a5d

File Explorer

dc66cdf44e7cd93052f2f85ec54663a2e64b38c257826d5b95179386d6a53a5d

.exe 394KB

dc66cdf44e7cd93052f2f85ec54663a2e64b38c257826d5b95179386d6a53a5d

IMPHASH 5f124a733ee23e7a763027f872397aba
SHA256 dc66cdf44e7cd93052f2f85ec54663a2e64b38c257826d5b95179386d6a53a5d
MD5 59514acaf309ffbeb730995b6104dab7
SHA1 f8c0358889f31e16629ee858ad1be97aff8b4d60
SHA512 c56cf9e9b757618a27936a6493b59b90b3c2a3f1cbe10ad910670abfab58a279703a2f88f9825bb80a8906606ceaa2df48e9e64f3e8e53a4782e368311c9e431
SSDEEP 6144:JvY/hfaNsYeaDDHBYolh5nkRAnlEJa7xwZ124+JXerMchss+x1UkUV:iht/a3HuUMRu7xw7f+h/wss+ck
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

213808

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\wibufijohijubu\zowujexux23.pdb

kernel32

OpenFileMappingA FindFirstVolumeW WaitForSingleObject GetNamedPipeHandleStateW CreateNamedPipeA CallNamedPipeW TerminateProcess FatalExit GetVersionExA CopyFileExA SetConsoleCP VerifyVersionInfoA VerLanguageNameW FindFirstFileExW FindFirstChangeNotificationA FreeEnvironmentStringsW SetProcessPriorityBoost SetVolumeMountPointA GetLongPathNameW CopyFileA TlsGetValue VerifyVersionInfoW GetConsoleCursorInfo SystemTimeToTzSpecificLocalTime GetProcessShutdownParameters MultiByteToWideChar GetNamedPipeHandleStateA BuildCommDCBAndTimeoutsW GetProcAddress GetModuleHandleA GlobalAlloc Sleep MoveFileW GetCommandLineA InterlockedDecrement DeleteFileA GetVolumePathNamesForVolumeNameW GetPrivateProfileStringA GetPrivateProfileIntW HeapSize GetProcessHeap CreateNamedPipeW SetFileShortNameA GetStartupInfoW GetEnvironmentVariableA GetCPInfoExA GetWindowsDirectoryA GetSystemWow64DirectoryA GetLastError GetProfileStringW GetCalendarInfoW SetLastError GetExitCodeThread DebugBreak FindFirstFileW ReadFileScatter ReadFile SetDefaultCommConfigA GetNumberOfConsoleMouseButtons GlobalWire WritePrivateProfileSectionW WriteProfileStringA lstrcatW FindCloseChangeNotification CreateActCtxW InterlockedPopEntrySList InterlockedExchange SetConsoleTitleW DefineDosDeviceA LoadLibraryA WritePrivateProfileStringA WaitNamedPipeW SetSystemTimeAdjustment GetConsoleMode UnregisterWaitEx PeekConsoleInputA GetNumberFormatA FindResourceExA FindNextFileW FindFirstFileA FreeEnvironmentStringsA CreateSemaphoreW EnumTimeFormatsA SetLocalTime OutputDebugStringW lstrcpyA HeapWalk CreateHardLinkW RaiseException GetSystemTime LockFile EnumCalendarInfoExW MoveFileExA GetConsoleCP SetConsoleScreenBufferSize SearchPathW IsBadStringPtrA GetAtomNameA GetConsoleAliasExesLengthW WriteConsoleInputW LocalLock EnumDateFormatsW SetCommState GetSystemTimeAdjustment EnumSystemLocalesA GetNumaHighestNodeNumber SetEndOfFile GetWriteWatch SetUnhandledExceptionFilter OpenSemaphoreW GetLargestConsoleWindowSize ReleaseActCtx GetComputerNameA HeapValidate OpenMutexW GetStringTypeA SetSystemPowerState FindResourceW SetTimerQueueTimer EnumResourceNamesA GetProcessTimes RegisterWaitForSingleObject IsBadWritePtr GetCurrentProcessId FatalAppExitA GetFileAttributesW lstrcpynW DisconnectNamedPipe FillConsoleOutputCharacterA GetCompressedFileSizeA SetFileShortNameW GetFullPathNameA WriteProfileStringW SetInformationJobObject GlobalAddAtomA SetCurrentDirectoryA CreateTimerQueueTimer LeaveCriticalSection CloseHandle CreateFileW GetCommandLineW HeapSetInformation IsBadReadPtr InterlockedIncrement DecodePointer GetModuleHandleW ExitProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent EncodePointer GetModuleFileNameW WriteFile GetStdHandle QueryPerformanceCounter GetTickCount GetCurrentThreadId GetSystemTimeAsFileTime GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsSetValue TlsFree HeapCreate EnterCriticalSection HeapAlloc GetModuleFileNameA HeapReAlloc HeapQueryInformation HeapFree GetACP GetOEMCP GetCPInfo IsValidCodePage LoadLibraryW RtlUnwind IsProcessorFeaturePresent OutputDebugStringA WriteConsoleW WideCharToMultiByte LCMapStringW GetStringTypeW SetFilePointer SetStdHandle FlushFileBuffers

user32

GetMenuItemID

Sharing

General

Malware Config

Signatures

File Explorer

dc66cdf44e7cd93052f2f85ec54663a2e64b38c257826d5b95179386d6a53a5d

kernel32

user32

generic