529d5749d04f162e335b2e3d63dad897328b884e8a1dff6da0faa85a7c0cac3a

General

Target
529d5749d04f162e335b2e3d63dad897328b884e8a1dff6da0faa85a7c0cac3a
Size 1.2MB
Sample241109-lh41easckf
SHA256 529d5749d04f162e335b2e3d63dad897328b884e8a1dff6da0faa85a7c0cac3a
MD5 170c8b46efe1028c5fefb610decd3888
SHA1 0731302897ac32ec67fcad6362f68d130d143acd
SHA512 bb4b5d297a06a6370efcd49990af95f41810f988edc33a460093014c60b92c54b3d46a642f068569e520bff8e341c925c9aeff45c67cd4bc3e187a81fecbb577
SSDEEP 24576:OZ/i8viZtNWceh50KP+8HInX9+nsbl54gOOm1J30y8zY:Ki86ZTu7tWntyshqgOOoS
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
529d5749d04f162e335b2e3d63dad897328b884e8a1dff6da0faa85a7c0cac3a

File Explorer

529d5749d04f162e335b2e3d63dad897328b884e8a1dff6da0faa85a7c0cac3a

.exe 1.2MB

529d5749d04f162e335b2e3d63dad897328b884e8a1dff6da0faa85a7c0cac3a

IMPHASH f88982a603d93c22b0731529c5e6f4b9
SHA256 529d5749d04f162e335b2e3d63dad897328b884e8a1dff6da0faa85a7c0cac3a
MD5 170c8b46efe1028c5fefb610decd3888
SHA1 0731302897ac32ec67fcad6362f68d130d143acd
SHA512 bb4b5d297a06a6370efcd49990af95f41810f988edc33a460093014c60b92c54b3d46a642f068569e520bff8e341c925c9aeff45c67cd4bc3e187a81fecbb577
SSDEEP 24576:OZ/i8viZtNWceh50KP+8HInX9+nsbl54gOOm1J30y8zY:Ki86ZTu7tWntyshqgOOoS
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

23760

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\winaligaw38\gogegib-fuwalim.pdb

kernel32

AddConsoleAliasW GetProcessPriorityBoost GetModuleHandleW GetConsoleAliasesLengthA GetWindowsDirectoryA EnumTimeFormatsA GetDateFormatA TzSpecificLocalTimeToSystemTime EnumResourceTypesA SetHandleCount TlsSetValue FindResourceExA GlobalAlloc LoadLibraryW GetCalendarInfoW SetConsoleCP FindNextVolumeW GetConsoleAliasW GlobalUnfix GetCPInfoExW GetCurrentDirectoryW SetLastError GetProcAddress HeapSize BeginUpdateResourceW WriteProfileSectionA SetThreadPriorityBoost LoadLibraryA WriteConsoleA InterlockedExchangeAdd WaitForMultipleObjects GetDefaultCommConfigA GetConsoleTitleW VirtualProtect TlsAlloc AddConsoleAliasA DebugBreak EnumCalendarInfoExA GetModuleHandleA VerSetConditionMask VirtualAlloc lstrlenA HeapAlloc MultiByteToWideChar Sleep ExitProcess GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree HeapReAlloc HeapCreate WriteFile GetStdHandle GetModuleFileNameA GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsFree GetCurrentThreadId InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA

user32

GetWindowLongW GetSysColorBrush RegisterClassW SetCaretPos CharLowerBuffW

gdi32

GetColorAdjustment GetCharWidthW

Sharing

General

Malware Config

Signatures

File Explorer

529d5749d04f162e335b2e3d63dad897328b884e8a1dff6da0faa85a7c0cac3a

kernel32

user32

gdi32

generic