11efce0526086ee25ce47ea24947e94e9b74af9102c5e42037711c7c628a50d4

General

Target
11efce0526086ee25ce47ea24947e94e9b74af9102c5e42037711c7c628a50d4
Size 428KB
Sample241109-najevatbpm
SHA256 11efce0526086ee25ce47ea24947e94e9b74af9102c5e42037711c7c628a50d4
MD5 f3550cda3d3c4923e3a5a6d250f370ae
SHA1 e21949208b900d9942a6342f1318d25854eb7d92
SHA512 4df7dfee9df6c26e5de97e2a07026fce7f06987bda539e48bd1047fcbc0a2ead903088adf62844b1e3329eb506e43a226550ec8007cdfc2a821b9bfda01c66f2
SSDEEP 6144:HheiEHjdNxQbjcTIldEfxcLD0XN6uVQF5em6jozUXwO4i7hAX3oYjGmSp/w:HXU5GwBcLDIgBUXwO4i7hATjGm/
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11efce0526086ee25ce47ea24947e94e9b74af9102c5e42037711c7c628a50d4

File Explorer

11efce0526086ee25ce47ea24947e94e9b74af9102c5e42037711c7c628a50d4

.exe 428KB

11efce0526086ee25ce47ea24947e94e9b74af9102c5e42037711c7c628a50d4

IMPHASH 5da563873972430c247e0379344310f5
SHA256 11efce0526086ee25ce47ea24947e94e9b74af9102c5e42037711c7c628a50d4
MD5 f3550cda3d3c4923e3a5a6d250f370ae
SHA1 e21949208b900d9942a6342f1318d25854eb7d92
SHA512 4df7dfee9df6c26e5de97e2a07026fce7f06987bda539e48bd1047fcbc0a2ead903088adf62844b1e3329eb506e43a226550ec8007cdfc2a821b9bfda01c66f2
SSDEEP 6144:HheiEHjdNxQbjcTIldEfxcLD0XN6uVQF5em6jozUXwO4i7hAX3oYjGmSp/w:HXU5GwBcLDIgBUXwO4i7hATjGm/
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

216688

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\huyahapa90\tusociwerozin-sizovu\cux.pdb

kernel32

ExitProcess GetComputerNameA GetFullPathNameA LocalUnlock EnumResourceNamesW UnregisterWait CreateTimerQueue FindResourceA FindFirstFileW SetThreadContext FindFirstChangeNotificationW SetFilePointer TryEnterCriticalSection EnumDateFormatsExW CopyFileExW GetNumaProcessorNode TlsGetValue GetStringTypeA SetLocalTime UnmapViewOfFile MoveFileExA CommConfigDialogA BuildCommDCBAndTimeoutsA SetUnhandledExceptionFilter GlobalAddAtomA InterlockedIncrement MoveFileExW GetCommState WritePrivateProfileSectionA SetDefaultCommConfigW SetFirmwareEnvironmentVariableA CreateJobObjectW QueryDosDeviceA GetNamedPipeHandleStateA GlobalLock WriteConsoleInputA SetVolumeMountPointW GetComputerNameW SetThreadExecutionState SleepEx FreeEnvironmentStringsA _lclose OutputDebugStringW GetCommConfig GetPrivateProfileStringW CreateRemoteThread GetCompressedFileSizeW WaitNamedPipeW EnumTimeFormatsA GetSystemWow64DirectoryA WriteFileGather TzSpecificLocalTimeToSystemTime TlsSetValue AllocateUserPhysicalPages FindResourceExA GetConsoleCP GetPrivateProfileIntA LoadLibraryW GetConsoleMode GetThreadSelectorEntry CopyFileW GetPrivateProfileStructW GetCalendarInfoA SetSystemTimeAdjustment GetProcessHandleCount GetSystemWindowsDirectoryA ReadConsoleOutputW GetConsoleAliasExesLengthW GetSystemTimeAdjustment GetVersionExW SetConsoleCP DeleteVolumeMountPointW InterlockedPopEntrySList LeaveCriticalSection GetFileAttributesA lstrcpynW SetDllDirectoryA SetConsoleMode HeapValidate GetVolumePathNamesForVolumeNameW SetConsoleCursorPosition VerifyVersionInfoA GetBinaryTypeA IsBadWritePtr TerminateProcess GetModuleFileNameW CreateActCtxA GetBinaryTypeW lstrcmpW lstrlenW IsBadStringPtrA GetTempPathW VerifyVersionInfoW InterlockedExchange SetCurrentDirectoryA FindFirstFileA GetCPInfoExW OpenMutexW GetLastError GetLongPathNameW SetLastError GetProcAddress GetProcessHeaps VirtualAlloc HeapSize PeekConsoleInputW BackupWrite CreateNamedPipeA EnumDateFormatsExA CreateTimerQueueTimer CreateJobSet LocalLock SetStdHandle EnterCriticalSection VerLanguageNameW SearchPathA BuildCommDCBW DefineDosDeviceA GetPrivateProfileStringA ResetEvent GetAtomNameA OpenMutexA CreateSemaphoreW LocalAlloc WritePrivateProfileStringA CreateHardLinkW GetExitCodeThread GetNumberFormatW SetCurrentDirectoryW SetFileApisToANSI VirtualLock GetCurrentConsoleFont HeapWalk GetPrivateProfileStructA SetSystemTime SetEnvironmentVariableA GetVolumePathNamesForVolumeNameA GetModuleFileNameA GetPrivateProfileSectionNamesA GetDefaultCommConfigA FindNextFileA WriteProfileStringA WTSGetActiveConsoleSessionId EnumDateFormatsA GlobalUnWire CreateIoCompletionPort SetConsoleTitleW GetModuleHandleA ContinueDebugEvent lstrcatW HeapSetInformation FatalExit FreeEnvironmentStringsW GetConsoleTitleW RequestWakeupLatency EnumDateFormatsW CompareStringA GetFileAttributesExW GetConsoleCursorInfo FatalAppExitA WriteConsoleOutputAttribute OutputDebugStringA DuplicateHandle SetProcessShutdownParameters OpenSemaphoreW FindFirstVolumeA TerminateJobObject DeleteTimerQueueTimer DeleteFileW GetCurrentProcessId SetFileValidData FindActCtxSectionStringW ResetWriteWatch UnregisterWaitEx EnumSystemLocalesW CopyFileExA lstrcpyA MoveFileA DeleteFileA EncodePointer DecodePointer GetCommandLineW GetStartupInfoW InterlockedDecrement GetModuleHandleW GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent WriteFile GetStdHandle IsBadReadPtr TlsAlloc GetCurrentThreadId TlsFree SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetEnvironmentStringsW HeapCreate GetACP GetOEMCP GetCPInfo IsValidCodePage RtlUnwind HeapAlloc HeapReAlloc HeapQueryInformation HeapFree WideCharToMultiByte WriteConsoleW LCMapStringW MultiByteToWideChar GetStringTypeW IsProcessorFeaturePresent FlushFileBuffers RaiseException CloseHandle CreateFileW

Sharing

General

Malware Config

Signatures

File Explorer

11efce0526086ee25ce47ea24947e94e9b74af9102c5e42037711c7c628a50d4

kernel32

generic