4065d03634564591ee20018cf6fd8a7f

General

Target
4065d03634564591ee20018cf6fd8a7f
Size 416KB
Sample241109-qn258avfpr
SHA256 207b11e9830e641bb78044eae44d9f092027d16dcdf48aedec3808cecf9f9d72
MD5 4065d03634564591ee20018cf6fd8a7f
SHA1 fcab47258d39ab5f7d7f119e5c73d1b5d81d4eb4
SHA512 8cc6fd69f31b537bfab478dea02987f94bc3a2aab8d83ac40ab2c88564e55ebfb68bac768daf39c1e85e752c872f8bdaad810c3590421352ecca190a31570e04
SSDEEP 6144:Fn7vye1hX9DYGBjgQhR7cG+sgkokddTZ1aHbP1/k4Wy/adMgDRy+DoK:F7hTXFPBjgQhUsNPdv1KVPR/anNf
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4065d03634564591ee20018cf6fd8a7f

File Explorer

4065d03634564591ee20018cf6fd8a7f

.exe 416KB

4065d03634564591ee20018cf6fd8a7f

IMPHASH 79308deed746567d711b667ee2d6efa1
SHA256 207b11e9830e641bb78044eae44d9f092027d16dcdf48aedec3808cecf9f9d72
MD5 4065d03634564591ee20018cf6fd8a7f
SHA1 fcab47258d39ab5f7d7f119e5c73d1b5d81d4eb4
SHA512 8cc6fd69f31b537bfab478dea02987f94bc3a2aab8d83ac40ab2c88564e55ebfb68bac768daf39c1e85e752c872f8bdaad810c3590421352ecca190a31570e04
SSDEEP 6144:Fn7vye1hX9DYGBjgQhR7cG+sgkokddTZ1aHbP1/k4Wy/adMgDRy+DoK:F7hTXFPBjgQhUsNPdv1KVPR/anNf
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

51008

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\fiwoyo\wukus89-kef51 baked83-vumili\dexu.pdb

kernel32

WriteProfileSectionA SetLocaleInfoA FindFirstVolumeA FlushConsoleInputBuffer HeapWalk FindFirstChangeNotificationA PulseEvent GetNamedPipeHandleStateW CompareFileTime EnumResourceTypesA EnumResourceNamesA FillConsoleOutputCharacterW GetTimeZoneInformation TerminateThread SignalObjectAndWait GetVersionExW VerifyVersionInfoA QueryDepthSList SetEvent FindNextFileA BuildCommDCBAndTimeoutsA GetCompressedFileSizeA CopyFileExW ReadConsoleOutputCharacterA SetDefaultCommConfigW VerLanguageNameA EscapeCommFunction WritePrivateProfileStructA FreeEnvironmentStringsA CreateTimerQueue FindNextVolumeMountPointA ResetWriteWatch WriteConsoleInputA SetComputerNameExA FindAtomA LoadResource GetThreadPriority CallNamedPipeW BuildCommDCBAndTimeoutsW VirtualProtect GetModuleHandleA LocalAlloc GlobalUnfix GetProfileSectionW GetCommandLineA InterlockedExchange FindFirstChangeNotificationW GetCalendarInfoA ReleaseActCtx OutputDebugStringW FormatMessageA SetDllDirectoryW WritePrivateProfileStringA GetUserDefaultLangID GlobalFix GetVersionExA HeapValidate InterlockedCompareExchange CopyFileA GetLastError SetCalendarInfoW DebugBreak SetConsoleTextAttribute SetLastError GetSystemWow64DirectoryW GetStartupInfoW DisconnectNamedPipe GetComputerNameExW GetPrivateProfileSectionNamesA ContinueDebugEvent InterlockedExchangeAdd GetSystemWindowsDirectoryW CopyFileW GetACP GetPrivateProfileStringA CreateActCtxA GetConsoleAliasW OutputDebugStringA lstrlenA WriteConsoleA GetPrivateProfileSectionNamesW GlobalWire FormatMessageW GetSystemTimeAsFileTime EnumCalendarInfoA SetThreadAffinityMask VerSetConditionMask CreateConsoleScreenBuffer GetSystemWindowsDirectoryA GetProfileStringW CreateIoCompletionPort AllocConsole GlobalGetAtomNameW SetComputerNameW GetConsoleAliasExesLengthW WriteConsoleInputW CreateMailslotW GetCommState SetThreadContext GetSystemTimeAdjustment _lwrite _lopen EnumSystemLocalesW GetConsoleAliasExesLengthA MoveFileA GetWriteWatch OpenSemaphoreW GetPrivateProfileStringW DeleteAtom EnumDateFormatsA LoadLibraryW WriteConsoleOutputCharacterA TlsFree GetProfileSectionA CreateActCtxW CreateJobSet CancelDeviceWakeupRequest AreFileApisANSI OpenWaitableTimerA OpenFileMappingA SetProcessAffinityMask GetConsoleAliasesLengthW SetProcessShutdownParameters FillConsoleOutputCharacterA FindNextVolumeMountPointW SetThreadPriority ReadConsoleA AddAtomA WriteConsoleOutputCharacterW GetNumberFormatW GetConsoleAliasExesA GetBinaryTypeA EnterCriticalSection InitializeCriticalSection GetCPInfoExW LoadLibraryA UnhandledExceptionFilter SetUnhandledExceptionFilter DeleteFileA RaiseException GetStartupInfoA IsBadReadPtr DeleteCriticalSection LeaveCriticalSection GetModuleFileNameW GetProcAddress SetStdHandle GetFileType WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode GetModuleHandleW Sleep InterlockedIncrement InterlockedDecrement ExitProcess GetModuleFileNameA GetStdHandle SetHandleCount TerminateProcess GetCurrentProcess IsDebuggerPresent QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW TlsGetValue TlsAlloc TlsSetValue HeapDestroy HeapCreate HeapFree VirtualFree HeapAlloc HeapSize HeapReAlloc VirtualAlloc GetOEMCP GetCPInfo IsValidCodePage RtlUnwind InitializeCriticalSectionAndSpinCount WriteConsoleW GetConsoleOutputCP MultiByteToWideChar SetFilePointer LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA CreateFileA CloseHandle FlushFileBuffers

gdi32

GetBitmapBits

Sharing

General

Malware Config

Signatures

File Explorer

4065d03634564591ee20018cf6fd8a7f

kernel32

gdi32

generic