cd6283905640a95c9b8d1cc10123ae61c1d7a20d45b67349803ace50aa1f8c7b

General

Target
cd6283905640a95c9b8d1cc10123ae61c1d7a20d45b67349803ace50aa1f8c7b
Size 333KB
Sample241110-devnka1lfr
SHA256 cd6283905640a95c9b8d1cc10123ae61c1d7a20d45b67349803ace50aa1f8c7b
MD5 3444d2725dbc7660b34f87adb41606e0
SHA1 36d91fd86176261cc59a5ecef61c9b46d448d41b
SHA512 e82e7367d81472af8be661e18e71c5093ea08d27a386512faf9ba14ca3deff7cf055545535a3123fa22f7b31a8ded83678d2c16a829fcc15ccc498d1a7d0f7c2
SSDEEP 6144:ooxwfScPvHgoXWbmrh1q9+EOFCLdNaD/1g:ouwf1fgyWmgoDwLdNA
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cd6283905640a95c9b8d1cc10123ae61c1d7a20d45b67349803ace50aa1f8c7b

File Explorer

cd6283905640a95c9b8d1cc10123ae61c1d7a20d45b67349803ace50aa1f8c7b

.exe 333KB

cd6283905640a95c9b8d1cc10123ae61c1d7a20d45b67349803ace50aa1f8c7b

IMPHASH ac5563f259b76cfa24f9c5fb695402f6
SHA256 cd6283905640a95c9b8d1cc10123ae61c1d7a20d45b67349803ace50aa1f8c7b
MD5 3444d2725dbc7660b34f87adb41606e0
SHA1 36d91fd86176261cc59a5ecef61c9b46d448d41b
SHA512 e82e7367d81472af8be661e18e71c5093ea08d27a386512faf9ba14ca3deff7cf055545535a3123fa22f7b31a8ded83678d2c16a829fcc15ccc498d1a7d0f7c2
SSDEEP 6144:ooxwfScPvHgoXWbmrh1q9+EOFCLdNaD/1g:ouwf1fgyWmgoDwLdNA
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

19149

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\lif\bixovohiceni-yunemecatadepo98\sevot.pdb

kernel32

WaitForSingleObject SetComputerNameW AddConsoleAliasW GetComputerNameW _lclose GetModuleHandleW EnumCalendarInfoExW GetConsoleAliasesA GetNumberFormatA GetConsoleTitleA ReadConsoleW GetWindowsDirectoryA GetConsoleAliasExesW EnumTimeFormatsW CreateActCtxW SetProcessPriorityBoost FindResourceExA GetCalendarInfoA GetSystemWindowsDirectoryA FindNextVolumeW Beep WriteConsoleW GetModuleFileNameW GetConsoleFontSize lstrlenW WritePrivateProfileStringW GlobalUnlock GetShortPathNameA GetCPInfoExW GetLastError SetLastError GetProcAddress GetLongPathNameA VirtualAlloc GetConsoleAliasA IsBadHugeWritePtr BeginUpdateResourceW EnumSystemCodePagesW _hwrite SetThreadPriorityBoost LoadLibraryA InterlockedExchangeAdd LocalAlloc AddAtomW RemoveDirectoryW QueryDosDeviceW WriteProfileSectionW EnumResourceTypesW GetOEMCP GetDefaultCommConfigA SetConsoleCursorInfo GetConsoleTitleW VirtualProtect GetDiskFreeSpaceExW FindAtomW WriteFileEx DeleteTimerQueueTimer SuspendThread GetModuleHandleA GetLocaleInfoA SystemTimeToFileTime FindResourceA lstrlenA HeapSize EnumResourceNamesW HeapAlloc MultiByteToWideChar GetCommandLineA GetStartupInfoA HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetCPInfo InterlockedIncrement InterlockedDecrement GetACP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId SetUnhandledExceptionFilter FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW

user32

ToAsciiEx GetKeyNameTextA ChangeMenuA CreateAcceleratorTableW GetWindowLongW GetSysColorBrush SetCaretPos ModifyMenuA IsCharAlphaNumericA CharLowerBuffW

gdi32

CreateHalftonePalette GetCharABCWidthsW GetCharWidthW

advapi32

BackupEventLogA

Sharing

General

Malware Config

Signatures

File Explorer

cd6283905640a95c9b8d1cc10123ae61c1d7a20d45b67349803ace50aa1f8c7b

kernel32

user32

gdi32

advapi32

generic