3159ad152818d7e04b4d76abcf8d4daeb9267da9a1145aa79f17468c9fada2be

General

Target
3159ad152818d7e04b4d76abcf8d4daeb9267da9a1145aa79f17468c9fada2be
Size 446KB
Sample241110-ehhc3symcw
SHA256 3159ad152818d7e04b4d76abcf8d4daeb9267da9a1145aa79f17468c9fada2be
MD5 b46f4f8038b9c99791b8bb27d7b4e73f
SHA1 11ab8bb82e9c42210d95bcff08b453e0c158965b
SHA512 affd7d93da8513a9c8636a697910ff1915aca02330e2d1545e414cdab67d84fb66e92f73a3158d61b71341486d1f330422b877aded1ebd7865aa4194daa4cad9
SSDEEP 6144:+YyWzDI3pZCdgaf62qT2Ew+34Ua66+u4jPBq2pjSKcGd56:Sv3p4KaEX34UJ6+uw5q2pjxd5
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3159ad152818d7e04b4d76abcf8d4daeb9267da9a1145aa79f17468c9fada2be

File Explorer

3159ad152818d7e04b4d76abcf8d4daeb9267da9a1145aa79f17468c9fada2be

.exe 446KB

3159ad152818d7e04b4d76abcf8d4daeb9267da9a1145aa79f17468c9fada2be

IMPHASH e479bf94b263bb2b50eb7920c14ccda8
SHA256 3159ad152818d7e04b4d76abcf8d4daeb9267da9a1145aa79f17468c9fada2be
MD5 b46f4f8038b9c99791b8bb27d7b4e73f
SHA1 11ab8bb82e9c42210d95bcff08b453e0c158965b
SHA512 affd7d93da8513a9c8636a697910ff1915aca02330e2d1545e414cdab67d84fb66e92f73a3158d61b71341486d1f330422b877aded1ebd7865aa4194daa4cad9
SSDEEP 6144:+YyWzDI3pZCdgaf62qT2Ew+34Ua66+u4jPBq2pjSKcGd56:Sv3p4KaEX34UJ6+uw5q2pjxd5
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

226400

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\wimifomazibo sigajofucocas_tonirigohe\jeta\cihexoh.pdb

kernel32

FindFirstVolumeA WaitForSingleObject GetNamedPipeHandleStateA CreateNamedPipeW CallNamedPipeA TerminateThread FatalExit GetVersionExA GetConsoleAliasesLengthA SetConsoleCP VerifyVersionInfoA VerLanguageNameA FindFirstFileExA FreeEnvironmentStringsW GetProcessPriorityBoost SetVolumeMountPointA GetLongPathNameW CopyFileW TlsSetValue VerifyVersionInfoW GetConsoleCursorInfo TzSpecificLocalTimeToSystemTime GetProcessShutdownParameters ReleaseSemaphore BuildCommDCBAndTimeoutsA GetProcAddress GetModuleHandleA GlobalAlloc SleepEx TlsGetValue MoveFileW GetCommandLineW InterlockedExchange DeleteFileA CreateActCtxW SetFileAttributesA GetPrivateProfileIntW HeapValidate GetProcessHeaps CreateNamedPipeA WriteConsoleOutputW GetStartupInfoA GetDiskFreeSpaceExW GetCPInfoExW GetWindowsDirectoryW GetSystemWow64DirectoryA SetLastError GetProfileStringW GetCalendarInfoA GetTickCount GetSystemTime DebugBreak FindFirstFileA WriteFileGather ReadFile GetNumberOfConsoleMouseButtons GetSystemWow64DirectoryW TerminateProcess lstrcatW CreateActCtxA InterlockedPopEntrySList SetCriticalSectionSpinCount DefineDosDeviceA WriteConsoleW InterlockedDecrement HeapWalk SetErrorMode PeekConsoleInputW GetNumberFormatW GetQueuedCompletionStatus FreeEnvironmentStringsA SetLocalTime FindResourceExW CreateSemaphoreW GetThreadLocale SetFileShortNameA lstrcpyW ReplaceFileW LockFile MoveFileExW GetConsoleCP GetVolumePathNameW SetConsoleScreenBufferSize FreeConsole GetConsoleAliasExesLengthW WriteConsoleInputW LocalShrink SetCommState SetSystemTimeAdjustment EnumSystemLocalesW GetNumaHighestNodeNumber SetEndOfFile ChangeTimerQueueTimer GetWriteWatch RaiseException OpenSemaphoreW GetLargestConsoleWindowSize ClearCommError ReleaseActCtx GetLastError GetComputerNameW OpenMutexA GetStringTypeA VirtualUnlock SetWaitableTimer CreateTimerQueueTimer GetProcessTimes IsBadWritePtr FatalAppExitA lstrcpynW SetNamedPipeHandleState FillConsoleOutputCharacterW GetCompressedFileSizeW FindNextVolumeMountPointW GetFullPathNameA WriteProfileStringA LockFileEx LeaveCriticalSection SetCurrentDirectoryA GlobalAddAtomW ReadFileEx EncodePointer DecodePointer HeapSetInformation GetStartupInfoW GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW IsBadReadPtr IsProcessorFeaturePresent TlsAlloc GetCurrentThreadId TlsFree GetModuleHandleW InterlockedIncrement ExitProcess WriteFile GetStdHandle EnterCriticalSection SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW HeapCreate SetFilePointer WideCharToMultiByte GetConsoleMode OutputDebugStringA OutputDebugStringW LoadLibraryW MultiByteToWideChar GetACP GetOEMCP GetCPInfo IsValidCodePage HeapAlloc GetModuleFileNameA HeapReAlloc HeapSize HeapQueryInformation HeapFree RtlUnwind SetStdHandle GetStringTypeW LCMapStringW FlushFileBuffers CreateFileW CloseHandle

user32

GetComboBoxInfo GetAltTabInfoA

Sharing

General

Malware Config

Signatures

File Explorer

3159ad152818d7e04b4d76abcf8d4daeb9267da9a1145aa79f17468c9fada2be

kernel32

user32

generic