af2126e78a2a6badb8da7606afc3ed86

General

Target
af2126e78a2a6badb8da7606afc3ed86
Size 271KB
Sample241109-relbsawcjp
SHA256 777829f145e5c2bf2358535fcb2c0b986caabbe7c3fbdc3095d57c1a9556aaa5
MD5 af2126e78a2a6badb8da7606afc3ed86
SHA1 bfb33dc78ca909904b248eeb0f15ea084f7c1ede
SHA512 699dafabc9b624fc78bd45ba778914501922d59a2a52fbf89f5fe9d30e82618005ff81519fb3dba575ca43a826696e01231f4b32e4d8ec67644c2ba91ac606d2
SSDEEP 6144:0WZ8rxRjUfTCgG+pSOVtbzSaoDgz3IFiJkTRdzTxtuTAnC+QR:VYxACtODCHDgz4AeRdzTCcCn
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/8515cb317f4f61f60155b347a0dcf3c0b816c7c121a029e5eed4c34b1d94c6c3

File Explorer

af2126e78a2a6badb8da7606afc3ed86

.zip 271KB
8515cb317f4f61f60155b347a0dcf3c0b816c7c121a029e5eed4c34b1d94c6c3

.exe 350KB

af2126e78a2a6badb8da7606afc3ed86

SHA256 777829f145e5c2bf2358535fcb2c0b986caabbe7c3fbdc3095d57c1a9556aaa5
MD5 af2126e78a2a6badb8da7606afc3ed86
SHA1 bfb33dc78ca909904b248eeb0f15ea084f7c1ede
SHA512 699dafabc9b624fc78bd45ba778914501922d59a2a52fbf89f5fe9d30e82618005ff81519fb3dba575ca43a826696e01231f4b32e4d8ec67644c2ba91ac606d2
SSDEEP 6144:0WZ8rxRjUfTCgG+pSOVtbzSaoDgz3IFiJkTRdzTxtuTAnC+QR:VYxACtODCHDgz4AeRdzTCcCn
MD5 SHA1 SHA512 SSDEEP

8515cb317f4f61f60155b347a0dcf3c0b816c7c121a029e5eed4c34b1d94c6c3

IMPHASH d03478a6c3c407f77f1436449d58c5a8
SHA256 8515cb317f4f61f60155b347a0dcf3c0b816c7c121a029e5eed4c34b1d94c6c3
MD5 57da7c4673e1c0a9e45f8f4ed89663dc
SHA1 09a4bc6695f55846fc00420e85fd711a2a07d04d
SHA512 ccaa617631a28370ce07a6eb3ee924f0297c38667e3335582e8d04f3c7b06a1ca89fe64329a96d1ffe2af888224680df2aef85445f7a93baf8b73753577c5f59
SSDEEP 6144:+ELiQaBQWSOVtbHSaoDoz3IJiJknRdzTx3jnTmiEWh:+E2QaBsOD+HDoz4McRdzTJjTm
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

21620

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\himakuliduwuc_yifegelawu\covanenejarono\gipeteja\dob.pdb

kernel32

GetConsoleAliasesLengthW GetConsoleAliasExesA LoadResource VerSetConditionMask InterlockedDecrement WaitNamedPipeA SetFirmwareEnvironmentVariableA GetSystemDefaultLCID GetGeoInfoW GlobalAlloc SetFileShortNameW GetConsoleAliasW GetFileAttributesW WriteConsoleW lstrlenW RaiseException LCMapStringA OpenMutexW SetLastError GetProcAddress FindVolumeMountPointClose VirtualAlloc IsValidCodePage SetComputerNameA LoadLibraryA LocalAlloc AddAtomA FoldStringA GetModuleHandleA CreateMutexA FreeEnvironmentStringsW FindNextFileW GetFileAttributesExW TerminateJobObject LCMapStringW GetStartupInfoW SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection GetLastError SetFilePointer TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection HeapFree CloseHandle GetModuleHandleW Sleep ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW GetEnvironmentStringsW GetCommandLineW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount SetStdHandle RtlUnwind GetCPInfo GetACP GetOEMCP HeapAlloc HeapReAlloc WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA WriteConsoleA GetConsoleOutputCP HeapSize CreateFileA

Sharing

General

Malware Config

Signatures

File Explorer

af2126e78a2a6badb8da7606afc3ed86

8515cb317f4f61f60155b347a0dcf3c0b816c7c121a029e5eed4c34b1d94c6c3

kernel32

generic