e6cd4ca75c8a8766890b1b4ff4a46346466c4e6e43d5576b0cfaac33657166ee

General

Target
e6cd4ca75c8a8766890b1b4ff4a46346466c4e6e43d5576b0cfaac33657166ee
Size 432KB
Sample241111-abnt3a1mbk
SHA256 e6cd4ca75c8a8766890b1b4ff4a46346466c4e6e43d5576b0cfaac33657166ee
MD5 2419d2aa92ae97b0c45f1023152e28cd
SHA1 80e61d52c5fcbfca55971281e01b8c519c555a79
SHA512 caaff9086248246c753cda337f3250478fd8a2c3d952b6046a84a1ccd490e69de2db3cc34856b3e8d52f9025b3228a867464b195833e40b681c4a14a2b9c1af0
SSDEEP 6144:yGO9Zbg+pdyt8LlZuPpTOl2eV7pw5fq22bM0harV83KpzZWK3g2tF0:VO91g+pdytWZucV2E3harS3KpMK3g2T
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e6cd4ca75c8a8766890b1b4ff4a46346466c4e6e43d5576b0cfaac33657166ee

File Explorer

e6cd4ca75c8a8766890b1b4ff4a46346466c4e6e43d5576b0cfaac33657166ee

.exe 432KB

e6cd4ca75c8a8766890b1b4ff4a46346466c4e6e43d5576b0cfaac33657166ee

IMPHASH f33e50aea2c2d0be08781f91e76d0908
SHA256 e6cd4ca75c8a8766890b1b4ff4a46346466c4e6e43d5576b0cfaac33657166ee
MD5 2419d2aa92ae97b0c45f1023152e28cd
SHA1 80e61d52c5fcbfca55971281e01b8c519c555a79
SHA512 caaff9086248246c753cda337f3250478fd8a2c3d952b6046a84a1ccd490e69de2db3cc34856b3e8d52f9025b3228a867464b195833e40b681c4a14a2b9c1af0
SSDEEP 6144:yGO9Zbg+pdyt8LlZuPpTOl2eV7pw5fq22bM0harV83KpzZWK3g2tF0:VO91g+pdytWZucV2E3harS3KpMK3g2T
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

223344

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\pacukucixiciko\wicuvepo\duxedasup.pdb

kernel32

OpenFileMappingA FindFirstVolumeW WaitForSingleObject GetNamedPipeHandleStateW CreateNamedPipeA CallNamedPipeW TerminateProcess FatalExit GetVersionExA CopyFileExA SetConsoleCP VerifyVersionInfoA VerLanguageNameW FindFirstFileExW FreeEnvironmentStringsW SetProcessPriorityBoost SetVolumeMountPointA GetLongPathNameW CopyFileA TlsGetValue VerifyVersionInfoW GetConsoleCursorInfo SystemTimeToTzSpecificLocalTime GetProcessShutdownParameters MultiByteToWideChar GetNamedPipeHandleStateA BuildCommDCBAndTimeoutsW GetProcAddress GetModuleHandleA GlobalAlloc Sleep MoveFileW GetCommandLineA InterlockedDecrement DeleteFileA GetVolumePathNamesForVolumeNameW GetPrivateProfileStringA GetPrivateProfileIntW HeapSize GetProcessHeap CreateNamedPipeW SetFileShortNameA GetStartupInfoW GetEnvironmentVariableA GetCPInfoExA GetWindowsDirectoryA GetSystemWow64DirectoryA GetLastError GetProfileStringW GetCalendarInfoW SetLastError GetExitCodeThread DebugBreak FindFirstFileW ReadFileScatter ReadFile SetDefaultCommConfigA GetNumberOfConsoleMouseButtons GlobalWire WritePrivateProfileSectionW WriteProfileStringA lstrcatW FindCloseChangeNotification CreateActCtxW InterlockedPopEntrySList InterlockedExchange SetConsoleTitleW DefineDosDeviceA LoadLibraryA WritePrivateProfileStringA WaitNamedPipeW SetSystemTimeAdjustment GetConsoleMode UnregisterWaitEx PeekConsoleInputA GetNumberFormatA FindResourceExA FindNextFileW FindFirstFileA FreeEnvironmentStringsA CreateSemaphoreW EnumTimeFormatsA SetLocalTime OutputDebugStringW lstrcpyA HeapWalk CreateHardLinkW RaiseException GetSystemTime LockFile EnumCalendarInfoExW MoveFileExA GetConsoleCP SetConsoleScreenBufferSize SearchPathW IsBadStringPtrA GetAtomNameA GetConsoleAliasExesLengthW WriteConsoleInputW LocalLock EnumDateFormatsW SetCommState GetSystemTimeAdjustment EnumSystemLocalesA GetNumaHighestNodeNumber SetEndOfFile GetWriteWatch SetUnhandledExceptionFilter OpenSemaphoreW GetLargestConsoleWindowSize ReleaseActCtx GetComputerNameA HeapValidate OpenMutexW GetStringTypeA SetSystemPowerState FindResourceW SetTimerQueueTimer EnumResourceNamesA GetProcessTimes RegisterWaitForSingleObject IsBadWritePtr GetCurrentProcessId FatalAppExitA GetFileAttributesW lstrcpynW DisconnectNamedPipe FillConsoleOutputCharacterA GetCompressedFileSizeA SetFileShortNameW GetFullPathNameA WriteProfileStringW SetInformationJobObject GlobalAddAtomA SetCurrentDirectoryA CreateTimerQueueTimer LeaveCriticalSection CloseHandle CreateFileW GetCommandLineW HeapSetInformation EncodePointer IsProcessorFeaturePresent IsBadReadPtr InterlockedIncrement DecodePointer GetModuleHandleW ExitProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW WriteFile GetStdHandle QueryPerformanceCounter GetTickCount GetCurrentThreadId GetSystemTimeAsFileTime GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsSetValue TlsFree HeapCreate GetACP GetOEMCP GetCPInfo IsValidCodePage EnterCriticalSection HeapAlloc GetModuleFileNameA HeapReAlloc HeapQueryInformation HeapFree LoadLibraryW RtlUnwind WideCharToMultiByte LCMapStringW GetStringTypeW OutputDebugStringA WriteConsoleW SetFilePointer SetStdHandle FlushFileBuffers

user32

GetMenuItemID

Sharing

General

Malware Config

Signatures

File Explorer

e6cd4ca75c8a8766890b1b4ff4a46346466c4e6e43d5576b0cfaac33657166ee

kernel32

user32

generic