ddaf3adb9dbc2e0c183c454be35f609431859b9a22ae42b459ccf9e54dfcbfe0

General

Target
ddaf3adb9dbc2e0c183c454be35f609431859b9a22ae42b459ccf9e54dfcbfe0
Size 434KB
Sample241111-d84hka1nes
SHA256 ddaf3adb9dbc2e0c183c454be35f609431859b9a22ae42b459ccf9e54dfcbfe0
MD5 e47abc010c3b2086f36835e4d973dfc3
SHA1 4ec674ef60125108d41afa001d233e9e6c1331b3
SHA512 f6a72a6a8ca37167a5ddd575fac369d172b60194f1977deb297e7a105bd3630e2222884a95f03084f6a87526bb3ef49e6885652cf52225a793e56c52eca17009
SSDEEP 6144:IA/r6ksws1/whwnCWCDmV344pWNE20JvHoinidCso6URDkp6:J/rroDCWeW7sE20JPoinnso6UdK
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ddaf3adb9dbc2e0c183c454be35f609431859b9a22ae42b459ccf9e54dfcbfe0

File Explorer

ddaf3adb9dbc2e0c183c454be35f609431859b9a22ae42b459ccf9e54dfcbfe0

.exe 434KB

ddaf3adb9dbc2e0c183c454be35f609431859b9a22ae42b459ccf9e54dfcbfe0

IMPHASH 9cae6f4a76061b40bb99bdb1c364f1a9
SHA256 ddaf3adb9dbc2e0c183c454be35f609431859b9a22ae42b459ccf9e54dfcbfe0
MD5 e47abc010c3b2086f36835e4d973dfc3
SHA1 4ec674ef60125108d41afa001d233e9e6c1331b3
SHA512 f6a72a6a8ca37167a5ddd575fac369d172b60194f1977deb297e7a105bd3630e2222884a95f03084f6a87526bb3ef49e6885652cf52225a793e56c52eca17009
SSDEEP 6144:IA/r6ksws1/whwnCWCDmV344pWNE20JvHoinidCso6URDkp6:J/rroDCWeW7sE20JPoinnso6UdK
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

224112

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\wep\puropinezekozo ne.pdb

kernel32

FindFirstVolumeW WaitForSingleObject GetNamedPipeHandleStateA CreateNamedPipeW CallNamedPipeW TerminateProcess FatalExit GetVersionExA CopyFileExW SetConsoleCP VerifyVersionInfoA VerLanguageNameW FindFirstFileExW FreeEnvironmentStringsW SetProcessPriorityBoost SetVolumeMountPointA GetLongPathNameW CopyFileA TlsGetValue VerifyVersionInfoW GetConsoleCursorInfo SystemTimeToTzSpecificLocalTime GetProcessShutdownParameters ReleaseSemaphore BuildCommDCBAndTimeoutsW GetProcAddress GetModuleHandleA GlobalAlloc Sleep MoveFileW GetCommandLineA InterlockedDecrement DeleteFileA GetVolumePathNamesForVolumeNameW SetFileAttributesA GetPrivateProfileIntW HeapSize GetProcessHeap CreateNamedPipeA WriteConsoleOutputW GetStartupInfoW GetDiskFreeSpaceExW GetCPInfoExW GetWindowsDirectoryA GetSystemWow64DirectoryA GetProfileStringW GetCalendarInfoA SetLastError GetExitCodeThread DebugBreak ReadFileScatter ReadFile SetDefaultCommConfigA GetNumberOfConsoleMouseButtons GlobalWire GetSystemWow64DirectoryW WriteProfileStringA lstrcatW FindCloseChangeNotification CreateActCtxA InterlockedPopEntrySList OutputDebugStringW InterlockedExchange DefineDosDeviceA LoadLibraryA WriteConsoleW SetSystemTimeAdjustment GetConsoleMode SetErrorMode UnregisterWaitEx PeekConsoleInputA GetNumberFormatA GetQueuedCompletionStatus FindResourceExA FindNextFileW FindFirstFileA FreeEnvironmentStringsA SetLocalTime EnumTimeFormatsW CreateSemaphoreW HeapSetInformation SetFileShortNameA lstrcpyA HeapWalk CreateHardLinkA RaiseException SetSystemTime LockFile EnumCalendarInfoExW MoveFileExW GetConsoleCP SetConsoleScreenBufferSize SearchPathW FreeConsole GetAtomNameW GetConsoleAliasExesLengthW WriteConsoleInputW LocalLock EnumDateFormatsW SetCommState GetSystemTimeAdjustment EnumSystemLocalesW GetNumaHighestNodeNumber SetEndOfFile GetWriteWatch SetUnhandledExceptionFilter OpenSemaphoreW GetLargestConsoleWindowSize ClearCommError ReleaseActCtx GetComputerNameA HeapValidate GetLastError OpenMutexW GetStringTypeA SetSystemPowerState VirtualUnlock SetWaitableTimer EnumResourceNamesA CreateTimerQueueTimer GetProcessTimes RegisterWaitForSingleObject IsBadWritePtr GetCurrentProcessId FatalAppExitA GetFileAttributesW lstrcpynW DisconnectNamedPipe FillConsoleOutputCharacterA GetCompressedFileSizeA FindNextVolumeMountPointW GetFullPathNameA WriteProfileStringW LockFileEx LeaveCriticalSection SetCurrentDirectoryA GlobalAddAtomW CloseHandle CreateFileW EncodePointer DecodePointer GetCommandLineW IsProcessorFeaturePresent TlsAlloc TlsSetValue GetCurrentThreadId TlsFree GetModuleHandleW InterlockedIncrement ExitProcess IsBadReadPtr GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW WriteFile GetStdHandle QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection HeapCreate GetACP GetOEMCP GetCPInfo IsValidCodePage EnterCriticalSection RtlUnwind LoadLibraryW HeapAlloc GetModuleFileNameA HeapReAlloc HeapQueryInformation HeapFree WideCharToMultiByte LCMapStringW MultiByteToWideChar GetStringTypeW OutputDebugStringA SetFilePointer SetStdHandle FlushFileBuffers

user32

GetMenuItemID

Sharing

General

Malware Config

Signatures

File Explorer

ddaf3adb9dbc2e0c183c454be35f609431859b9a22ae42b459ccf9e54dfcbfe0

kernel32

user32

generic