091432c494a38b9ec474bfc8ccb15f23d5b214164c298f73b419de83895b7619

General

Target
091432c494a38b9ec474bfc8ccb15f23d5b214164c298f73b419de83895b7619
Size 428KB
Sample241109-ylvmcs1crc
SHA256 091432c494a38b9ec474bfc8ccb15f23d5b214164c298f73b419de83895b7619
MD5 c1db474a7cb50415acc8b5b594d03b79
SHA1 e9fdae4d79299a99e230e161c2d67c466b3ea2c6
SHA512 a9ee4f6e9587a7956dcd577231852b2270cf4ebc3169ee654de8c74cd09d6d0ef9e18ab557b1556cefe83c76e3e24b477882231254e4bafb4862740a76faa60d
SSDEEP 6144:HheiEHjdNxQbjcTIldEfxcLD0XN6uVQF5em6jozUXwO4i7hAX3oYjGmSp/w:HXU5GwBcLDIgBUXwO4i7hATjGm/
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
091432c494a38b9ec474bfc8ccb15f23d5b214164c298f73b419de83895b7619

File Explorer

091432c494a38b9ec474bfc8ccb15f23d5b214164c298f73b419de83895b7619

.exe 428KB

091432c494a38b9ec474bfc8ccb15f23d5b214164c298f73b419de83895b7619

IMPHASH 5da563873972430c247e0379344310f5
SHA256 091432c494a38b9ec474bfc8ccb15f23d5b214164c298f73b419de83895b7619
MD5 c1db474a7cb50415acc8b5b594d03b79
SHA1 e9fdae4d79299a99e230e161c2d67c466b3ea2c6
SHA512 a9ee4f6e9587a7956dcd577231852b2270cf4ebc3169ee654de8c74cd09d6d0ef9e18ab557b1556cefe83c76e3e24b477882231254e4bafb4862740a76faa60d
SSDEEP 6144:HheiEHjdNxQbjcTIldEfxcLD0XN6uVQF5em6jozUXwO4i7hAX3oYjGmSp/w:HXU5GwBcLDIgBUXwO4i7hATjGm/
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

216688

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\huyahapa90\tusociwerozin-sizovu\cux.pdb

kernel32

ExitProcess GetComputerNameA GetFullPathNameA LocalUnlock EnumResourceNamesW UnregisterWait CreateTimerQueue FindResourceA FindFirstFileW SetThreadContext FindFirstChangeNotificationW SetFilePointer TryEnterCriticalSection EnumDateFormatsExW CopyFileExW GetNumaProcessorNode TlsGetValue GetStringTypeA SetLocalTime UnmapViewOfFile MoveFileExA CommConfigDialogA BuildCommDCBAndTimeoutsA SetUnhandledExceptionFilter GlobalAddAtomA InterlockedIncrement MoveFileExW GetCommState WritePrivateProfileSectionA SetDefaultCommConfigW SetFirmwareEnvironmentVariableA CreateJobObjectW QueryDosDeviceA GetNamedPipeHandleStateA GlobalLock WriteConsoleInputA SetVolumeMountPointW GetComputerNameW SetThreadExecutionState SleepEx FreeEnvironmentStringsA _lclose OutputDebugStringW GetCommConfig GetPrivateProfileStringW CreateRemoteThread GetCompressedFileSizeW WaitNamedPipeW EnumTimeFormatsA GetSystemWow64DirectoryA WriteFileGather TzSpecificLocalTimeToSystemTime TlsSetValue AllocateUserPhysicalPages FindResourceExA GetConsoleCP GetPrivateProfileIntA LoadLibraryW GetConsoleMode GetThreadSelectorEntry CopyFileW GetPrivateProfileStructW GetCalendarInfoA SetSystemTimeAdjustment GetProcessHandleCount GetSystemWindowsDirectoryA ReadConsoleOutputW GetConsoleAliasExesLengthW GetSystemTimeAdjustment GetVersionExW SetConsoleCP DeleteVolumeMountPointW InterlockedPopEntrySList LeaveCriticalSection GetFileAttributesA lstrcpynW SetDllDirectoryA SetConsoleMode HeapValidate GetVolumePathNamesForVolumeNameW SetConsoleCursorPosition VerifyVersionInfoA GetBinaryTypeA IsBadWritePtr TerminateProcess GetModuleFileNameW CreateActCtxA GetBinaryTypeW lstrcmpW lstrlenW IsBadStringPtrA GetTempPathW VerifyVersionInfoW InterlockedExchange SetCurrentDirectoryA FindFirstFileA GetCPInfoExW OpenMutexW GetLastError GetLongPathNameW SetLastError GetProcAddress GetProcessHeaps VirtualAlloc HeapSize PeekConsoleInputW BackupWrite CreateNamedPipeA EnumDateFormatsExA CreateTimerQueueTimer CreateJobSet LocalLock SetStdHandle EnterCriticalSection VerLanguageNameW SearchPathA BuildCommDCBW DefineDosDeviceA GetPrivateProfileStringA ResetEvent GetAtomNameA OpenMutexA CreateSemaphoreW LocalAlloc WritePrivateProfileStringA CreateHardLinkW GetExitCodeThread GetNumberFormatW SetCurrentDirectoryW SetFileApisToANSI VirtualLock GetCurrentConsoleFont HeapWalk GetPrivateProfileStructA SetSystemTime SetEnvironmentVariableA GetVolumePathNamesForVolumeNameA GetModuleFileNameA GetPrivateProfileSectionNamesA GetDefaultCommConfigA FindNextFileA WriteProfileStringA WTSGetActiveConsoleSessionId EnumDateFormatsA GlobalUnWire CreateIoCompletionPort SetConsoleTitleW GetModuleHandleA ContinueDebugEvent lstrcatW HeapSetInformation FatalExit FreeEnvironmentStringsW GetConsoleTitleW RequestWakeupLatency EnumDateFormatsW CompareStringA GetFileAttributesExW GetConsoleCursorInfo FatalAppExitA WriteConsoleOutputAttribute OutputDebugStringA DuplicateHandle SetProcessShutdownParameters OpenSemaphoreW FindFirstVolumeA TerminateJobObject DeleteTimerQueueTimer DeleteFileW GetCurrentProcessId SetFileValidData FindActCtxSectionStringW ResetWriteWatch UnregisterWaitEx EnumSystemLocalesW CopyFileExA lstrcpyA MoveFileA DeleteFileA EncodePointer DecodePointer GetCommandLineW GetStartupInfoW InterlockedDecrement GetModuleHandleW GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent WriteFile GetStdHandle IsBadReadPtr TlsAlloc GetCurrentThreadId TlsFree SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetEnvironmentStringsW HeapCreate GetACP GetOEMCP GetCPInfo IsValidCodePage RtlUnwind HeapAlloc HeapReAlloc HeapQueryInformation HeapFree WideCharToMultiByte WriteConsoleW LCMapStringW MultiByteToWideChar GetStringTypeW IsProcessorFeaturePresent FlushFileBuffers RaiseException CloseHandle CreateFileW

Sharing

General

Malware Config

Signatures

File Explorer

091432c494a38b9ec474bfc8ccb15f23d5b214164c298f73b419de83895b7619

kernel32

generic