956d26faa5918ac6316a03c6436b8286ee299814b19a0e14946b8f6d5e269f53

General

Target
956d26faa5918ac6316a03c6436b8286ee299814b19a0e14946b8f6d5e269f53
Size 279KB
Sample241109-sa6mlayrhn
SHA256 956d26faa5918ac6316a03c6436b8286ee299814b19a0e14946b8f6d5e269f53
MD5 d04fba670d6f99659e5cf732fdcff53c
SHA1 0b255de8de21179fa1ad05638f2ba85861686fee
SHA512 81677d7c13226a781f849258205dd1ff785214aa4957cce7b9d53b2701fd5ee83459022dc5e9f0ec355204723af5661ff3749e3065d7c323299f200a9ee5be4c
SSDEEP 6144:dAWzp/kQNzXMWJsF3c/PtGmNobiT48zZs3AbrqTUkHhSfbr5w:dpzBk0zXfQEPtGmNobiT48VATBH0fbr
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
956d26faa5918ac6316a03c6436b8286ee299814b19a0e14946b8f6d5e269f53

File Explorer

956d26faa5918ac6316a03c6436b8286ee299814b19a0e14946b8f6d5e269f53

.exe 279KB

956d26faa5918ac6316a03c6436b8286ee299814b19a0e14946b8f6d5e269f53

IMPHASH 5a76ffd37b98763a995fdca0a01faaec
SHA256 956d26faa5918ac6316a03c6436b8286ee299814b19a0e14946b8f6d5e269f53
MD5 d04fba670d6f99659e5cf732fdcff53c
SHA1 0b255de8de21179fa1ad05638f2ba85861686fee
SHA512 81677d7c13226a781f849258205dd1ff785214aa4957cce7b9d53b2701fd5ee83459022dc5e9f0ec355204723af5661ff3749e3065d7c323299f200a9ee5be4c
SSDEEP 6144:dAWzp/kQNzXMWJsF3c/PtGmNobiT48zZs3AbrqTUkHhSfbr5w:dpzBk0zXfQEPtGmNobiT48VATBH0fbr
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

22368

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\dayudarilawit\pucocuvivazi.pdb

kernel32

SetFirmwareEnvironmentVariableA GetUserDefaultLCID GetModuleHandleW GetConsoleAliasesA SetCommState GetVolumePathNameW GlobalAlloc SetFileShortNameW LoadLibraryW LeaveCriticalSection GetFileAttributesA EnumSystemCodePagesA GetNamedPipeInfo GetFileAttributesW WriteConsoleW CreateJobObjectA LCMapStringA GetConsoleAliasesW FillConsoleOutputCharacterW GetLastError WaitNamedPipeA ReadConsoleOutputCharacterA GetProcAddress VirtualAlloc CreateNamedPipeA CopyFileA WriteConsoleA CreateHardLinkW GetNumberFormatW SetProcessWorkingSetSize OpenJobObjectW FoldStringW GetModuleHandleA FindFirstChangeNotificationA GetFileAttributesExW GetCPInfoExA GetVolumeNameForVolumeMountPointW AddConsoleAliasA GetComputerNameA FillConsoleOutputCharacterA SetLastError GetFullPathNameW HeapAlloc GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent DeleteCriticalSection EnterCriticalSection HeapFree VirtualFree HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapSize RtlUnwind SetHandleCount GetFileType SetFilePointer GetCPInfo GetACP GetOEMCP IsValidCodePage FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException InitializeCriticalSectionAndSpinCount LoadLibraryA CloseHandle CreateFileA GetConsoleCP GetConsoleMode SetStdHandle FlushFileBuffers MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetEndOfFile GetProcessHeap ReadFile GetConsoleOutputCP

gdi32

GetCharacterPlacementW

advapi32

CreateRestrictedToken

Sharing

General

Malware Config

Signatures

File Explorer

956d26faa5918ac6316a03c6436b8286ee299814b19a0e14946b8f6d5e269f53

kernel32

gdi32

advapi32

generic