4df3bb6aeae4faadbe30a8358095931b

General

Target
4df3bb6aeae4faadbe30a8358095931b
Size 373KB
Sample241111-cs8xns1bpd
SHA256 a149168a51af356300e5c4b84548b69ed5a39e5f86207b0bd72d1892d4eeeb7a
MD5 4df3bb6aeae4faadbe30a8358095931b
SHA1 87e1cecfa5d8e1d767658a814619ed4d4cd390e2
SHA512 97d361f021256f833088efd87ba0ae50a62bdd95e325eb118730a0539ca2fbf80400509e90163533a57823b538471fc304c83868fe4c1c97767d1d0c8c3b2f31
SSDEEP 6144:6EgPS+2K5Y0dvG4djhrnpV3yw+dNHpLQOIf+STXg:6EgPS+2ivz3Lix1P6
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4df3bb6aeae4faadbe30a8358095931b

File Explorer

4df3bb6aeae4faadbe30a8358095931b

.exe 373KB

4df3bb6aeae4faadbe30a8358095931b

IMPHASH 63507382e118d73368aa2dbc187b75a9
SHA256 a149168a51af356300e5c4b84548b69ed5a39e5f86207b0bd72d1892d4eeeb7a
MD5 4df3bb6aeae4faadbe30a8358095931b
SHA1 87e1cecfa5d8e1d767658a814619ed4d4cd390e2
SHA512 97d361f021256f833088efd87ba0ae50a62bdd95e325eb118730a0539ca2fbf80400509e90163533a57823b538471fc304c83868fe4c1c97767d1d0c8c3b2f31
SSDEEP 6144:6EgPS+2K5Y0dvG4djhrnpV3yw+dNHpLQOIf+STXg:6EgPS+2ivz3Lix1P6
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

21722

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\sajewahecomeho27\jecutaxu.pdb

kernel32

ReadConsoleA HeapFree AddConsoleAliasW SetVolumeMountPointW GetPrivateProfileIntA GetSystemDirectoryW WideCharToMultiByte LoadLibraryW FreeConsole GetVersionExW LeaveCriticalSection WriteConsoleW ReplaceFileW lstrlenW ReleaseActCtx SetLastError LocalCompact SetStdHandle GetAtomNameA LoadLibraryA LocalAlloc SetConsoleCtrlHandler GetModuleFileNameA FindFirstChangeNotificationA FreeEnvironmentStringsW GetConsoleTitleW VirtualProtect GetCPInfoExA SetCalendarInfoA VirtualAlloc GetDefaultCommConfigW CloseHandle CreateFileA UnhandledExceptionFilter SetUnhandledExceptionFilter HeapAlloc MultiByteToWideChar GetCommandLineA GetStartupInfoA RaiseException RtlUnwind GetModuleHandleW Sleep GetProcAddress ExitProcess GetLastError WriteFile GetStdHandle TerminateProcess GetCurrentProcess IsDebuggerPresent DeleteCriticalSection EnterCriticalSection VirtualFree HeapReAlloc HeapCreate GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId SetFilePointer FreeEnvironmentStringsA GetEnvironmentStrings GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers HeapSize WriteConsoleA GetConsoleOutputCP

user32

ChildWindowFromPoint

msimg32

AlphaBlend

Sharing

General

Malware Config

Signatures

File Explorer

4df3bb6aeae4faadbe30a8358095931b

kernel32

user32

msimg32

generic