9a4749a239e5123e9694c0aa9215c1a6d2aa74ec

General

Target
9a4749a239e5123e9694c0aa9215c1a6d2aa74ec
Size 416KB
Sample241109-mapq7asfje
SHA256 10b3bb44c1490981c1958c30cf49f5b813e1085c7758f669f4c1bae2d895292a
MD5 9e013481364f1fc3dc93781b4998413d
SHA1 9a4749a239e5123e9694c0aa9215c1a6d2aa74ec
SHA512 820db724b6be795298164d16c544ff0c294fda5eab26d053059b5465f56019202ccadaac6678bef645758d4974aeb20cb3d7fd90042c8e8884e6c06502ab021e
SSDEEP 6144:Fn7vye1hX9DYGBjgQhR7cG+sgkokddTZ1aHbP1/k4Wy/adMgDRy+DoK:F7hTXFPBjgQhUsNPdv1KVPR/anNf
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9a4749a239e5123e9694c0aa9215c1a6d2aa74ec

File Explorer

9a4749a239e5123e9694c0aa9215c1a6d2aa74ec

.exe 416KB

9a4749a239e5123e9694c0aa9215c1a6d2aa74ec

IMPHASH 79308deed746567d711b667ee2d6efa1
SHA256 10b3bb44c1490981c1958c30cf49f5b813e1085c7758f669f4c1bae2d895292a
MD5 9e013481364f1fc3dc93781b4998413d
SHA1 9a4749a239e5123e9694c0aa9215c1a6d2aa74ec
SHA512 820db724b6be795298164d16c544ff0c294fda5eab26d053059b5465f56019202ccadaac6678bef645758d4974aeb20cb3d7fd90042c8e8884e6c06502ab021e
SSDEEP 6144:Fn7vye1hX9DYGBjgQhR7cG+sgkokddTZ1aHbP1/k4Wy/adMgDRy+DoK:F7hTXFPBjgQhUsNPdv1KVPR/anNf
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

51008

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\fiwoyo\wukus89-kef51 baked83-vumili\dexu.pdb

kernel32

WriteProfileSectionA SetLocaleInfoA FindFirstVolumeA FlushConsoleInputBuffer HeapWalk FindFirstChangeNotificationA PulseEvent GetNamedPipeHandleStateW CompareFileTime EnumResourceTypesA EnumResourceNamesA FillConsoleOutputCharacterW GetTimeZoneInformation TerminateThread SignalObjectAndWait GetVersionExW VerifyVersionInfoA QueryDepthSList SetEvent FindNextFileA BuildCommDCBAndTimeoutsA GetCompressedFileSizeA CopyFileExW ReadConsoleOutputCharacterA SetDefaultCommConfigW VerLanguageNameA EscapeCommFunction WritePrivateProfileStructA FreeEnvironmentStringsA CreateTimerQueue FindNextVolumeMountPointA ResetWriteWatch WriteConsoleInputA SetComputerNameExA FindAtomA LoadResource GetThreadPriority CallNamedPipeW BuildCommDCBAndTimeoutsW VirtualProtect GetModuleHandleA LocalAlloc GlobalUnfix GetProfileSectionW GetCommandLineA InterlockedExchange FindFirstChangeNotificationW GetCalendarInfoA ReleaseActCtx OutputDebugStringW FormatMessageA SetDllDirectoryW WritePrivateProfileStringA GetUserDefaultLangID GlobalFix GetVersionExA HeapValidate InterlockedCompareExchange CopyFileA GetLastError SetCalendarInfoW DebugBreak SetConsoleTextAttribute SetLastError GetSystemWow64DirectoryW GetStartupInfoW DisconnectNamedPipe GetComputerNameExW GetPrivateProfileSectionNamesA ContinueDebugEvent InterlockedExchangeAdd GetSystemWindowsDirectoryW CopyFileW GetACP GetPrivateProfileStringA CreateActCtxA GetConsoleAliasW OutputDebugStringA lstrlenA WriteConsoleA GetPrivateProfileSectionNamesW GlobalWire FormatMessageW GetSystemTimeAsFileTime EnumCalendarInfoA SetThreadAffinityMask VerSetConditionMask CreateConsoleScreenBuffer GetSystemWindowsDirectoryA GetProfileStringW CreateIoCompletionPort AllocConsole GlobalGetAtomNameW SetComputerNameW GetConsoleAliasExesLengthW WriteConsoleInputW CreateMailslotW GetCommState SetThreadContext GetSystemTimeAdjustment _lwrite _lopen EnumSystemLocalesW GetConsoleAliasExesLengthA MoveFileA GetWriteWatch OpenSemaphoreW GetPrivateProfileStringW DeleteAtom EnumDateFormatsA LoadLibraryW WriteConsoleOutputCharacterA TlsFree GetProfileSectionA CreateActCtxW CreateJobSet CancelDeviceWakeupRequest AreFileApisANSI OpenWaitableTimerA OpenFileMappingA SetProcessAffinityMask GetConsoleAliasesLengthW SetProcessShutdownParameters FillConsoleOutputCharacterA FindNextVolumeMountPointW SetThreadPriority ReadConsoleA AddAtomA WriteConsoleOutputCharacterW GetNumberFormatW GetConsoleAliasExesA GetBinaryTypeA EnterCriticalSection InitializeCriticalSection GetCPInfoExW LoadLibraryA UnhandledExceptionFilter SetUnhandledExceptionFilter DeleteFileA RaiseException GetStartupInfoA IsBadReadPtr DeleteCriticalSection LeaveCriticalSection GetModuleFileNameW GetProcAddress SetStdHandle GetFileType WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode GetModuleHandleW Sleep InterlockedIncrement InterlockedDecrement ExitProcess GetModuleFileNameA GetStdHandle SetHandleCount TerminateProcess GetCurrentProcess IsDebuggerPresent QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW TlsGetValue TlsAlloc TlsSetValue HeapDestroy HeapCreate HeapFree VirtualFree HeapAlloc HeapSize HeapReAlloc VirtualAlloc GetOEMCP GetCPInfo IsValidCodePage RtlUnwind InitializeCriticalSectionAndSpinCount WriteConsoleW GetConsoleOutputCP MultiByteToWideChar SetFilePointer LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA CreateFileA CloseHandle FlushFileBuffers

gdi32

GetBitmapBits

Sharing

General

Malware Config

Signatures

File Explorer

9a4749a239e5123e9694c0aa9215c1a6d2aa74ec

kernel32

gdi32

generic