4c6fb742ec23aaddebd5b488de9400c58269392120d002bf2f9740adaca12cd1N[.]exe

General

Target
4c6fb742ec23aaddebd5b488de9400c58269392120d002bf2f9740adaca12cd1N.exe
Size 457KB
Sample241111-cfj3sazdrn
SHA256 0823fa53fdeec482fe9aa2fbfb18c657a8c1d842a520cf4beaa31eadb3f612a4
MD5 f78ab82d417f1f85fd37151f5e4954e2
SHA1 cbd63591c14c07be2126fed0ef46530950e7ba0e
SHA512 aa202c155f02d1d3646f352e2a93444d9cab5d0617715a2ca3c592be559755045afca1ca538081edfe5ca6a8a87eb5fc40c6f01c1174ab91a81b3598a02031f5
SSDEEP 6144:lupun857mLsFXhSIvkUYmsAZv0CGtjKITv13iMj9bAHDDdog0fO7WnI0:V857mgFXKGoYMjRK/ECWnR
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c6fb742ec23aaddebd5b488de9400c58269392120d002bf2f9740adaca12cd1N.exe

File Explorer

4c6fb742ec23aaddebd5b488de9400c58269392120d002bf2f9740adaca12cd1N.exe

.exe 457KB

4c6fb742ec23aaddebd5b488de9400c58269392120d002bf2f9740adaca12cd1N.exe

IMPHASH 5fe0b073d2bf262b2cfd9470524e0ed6
SHA256 0823fa53fdeec482fe9aa2fbfb18c657a8c1d842a520cf4beaa31eadb3f612a4
MD5 f78ab82d417f1f85fd37151f5e4954e2
SHA1 cbd63591c14c07be2126fed0ef46530950e7ba0e
SHA512 aa202c155f02d1d3646f352e2a93444d9cab5d0617715a2ca3c592be559755045afca1ca538081edfe5ca6a8a87eb5fc40c6f01c1174ab91a81b3598a02031f5
SSDEEP 6144:lupun857mLsFXhSIvkUYmsAZv0CGtjKITv13iMj9bAHDDdog0fO7WnI0:V857mgFXKGoYMjRK/ECWnR
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

35529

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\wenosu\wozo\rojigelumu.pdb

kernel32

lstrcpynA FindResourceExW GetCommState WaitNamedPipeA GetLogicalDriveStringsW GlobalSize CreateHardLinkA WaitForSingleObjectEx GetConsoleAliasesA GetCompressedFileSizeW EnumResourceTypesA LoadLibraryW GetConsoleMode InterlockedPopEntrySList GetWriteWatch GetFileAttributesW WriteConsoleW GetModuleFileNameW CreateActCtxA WritePrivateProfileStringW GetConsoleAliasesW GetStdHandle SetLastError GetProcAddress VirtualAlloc BeginUpdateResourceW IsBadStringPtrW CreateMemoryResourceNotification SearchPathA GetNumaHighestNodeNumber LoadLibraryA WriteConsoleA LocalAlloc DnsHostnameToComputerNameA WriteProfileSectionW FoldStringA GetCommTimeouts FreeEnvironmentStringsW GetConsoleTitleW GetShortPathNameW DeleteTimerQueueTimer GlobalAddAtomW DebugBreak EnumCalendarInfoExA DeleteFileA FlushFileBuffers CloseHandle CreateFileA GetConsoleOutputCP SetStdHandle GetModuleHandleA GetLocaleInfoW FindVolumeClose EnumSystemCodePagesW SetDefaultCommConfigA InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree MultiByteToWideChar TerminateProcess GetCurrentProcess IsDebuggerPresent GetStartupInfoW RtlUnwind RaiseException LCMapStringA WideCharToMultiByte LCMapStringW GetCPInfo GetModuleHandleW ExitProcess WriteFile GetModuleFileNameA HeapAlloc HeapCreate VirtualFree HeapReAlloc GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeA GetStringTypeW InitializeCriticalSectionAndSpinCount SetFilePointer GetConsoleCP

user32

ClientToScreen LoadMenuA MessageBoxIndirectA GetKBCodePage GetListBoxInfo GetCaretPos SetScrollInfo GetShellWindow

gdi32

GetCharWidthI

advapi32

GetEventLogInformation

Sharing