dc0237cdde1a733c79f39fd8d6bc01643af8d3d5d02984761d032d98e7f9cf8b

General

Target
dc0237cdde1a733c79f39fd8d6bc01643af8d3d5d02984761d032d98e7f9cf8b
Size 336KB
Sample241111-gc34psvaqe
SHA256 dc0237cdde1a733c79f39fd8d6bc01643af8d3d5d02984761d032d98e7f9cf8b
MD5 9ba56fa8715f909d0e492d19ad35ab33
SHA1 5334b437910ad67af18c79915c998e6db1356b41
SHA512 1fb99fc41c5c5f56d5f27f3074888988a50b9fcd7ab2bb09f0ca2d4587eed258f844ae6e18c1a25b2afdcd8b3a68d7cabcb47e52d3a3731cec83368deb6a88f4
SSDEEP 6144:SsJevkYswH5I0tPKo9Sd9l+PJMy6U/g9nLbecpbUS9A8EdaB9+Kp8zVyt:VQ/NVKo9qvkMypWnLbecpbUXTaB9+7
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc0237cdde1a733c79f39fd8d6bc01643af8d3d5d02984761d032d98e7f9cf8b

File Explorer

dc0237cdde1a733c79f39fd8d6bc01643af8d3d5d02984761d032d98e7f9cf8b

.exe 336KB

dc0237cdde1a733c79f39fd8d6bc01643af8d3d5d02984761d032d98e7f9cf8b

IMPHASH b2b1ce057c4a3ad8c1ee685e46521866
SHA256 dc0237cdde1a733c79f39fd8d6bc01643af8d3d5d02984761d032d98e7f9cf8b
MD5 9ba56fa8715f909d0e492d19ad35ab33
SHA1 5334b437910ad67af18c79915c998e6db1356b41
SHA512 1fb99fc41c5c5f56d5f27f3074888988a50b9fcd7ab2bb09f0ca2d4587eed258f844ae6e18c1a25b2afdcd8b3a68d7cabcb47e52d3a3731cec83368deb6a88f4
SSDEEP 6144:SsJevkYswH5I0tPKo9Sd9l+PJMy6U/g9nLbecpbUS9A8EdaB9+Kp8zVyt:VQ/NVKo9qvkMypWnLbecpbUXTaB9+7
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

173536

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\mesavuh-50 wilikazaji\hebogece zuxejorut\48_gabo.pdb

kernel32

InterlockedDecrement FindFirstFileExW OutputDebugStringW GetModuleHandleW GetTickCount IsBadReadPtr GetConsoleAliasesLengthA GlobalAlloc SetFileShortNameW TerminateThread GetVersionExW LocalHandle GetModuleFileNameW GetEnvironmentVariableA ExitThread lstrlenW GetStartupInfoW GetConsoleOutputCP SetCurrentDirectoryA GetCurrentDirectoryW SetLastError GetProcAddress GetLongPathNameA MoveFileW WriteProfileSectionA CopyFileA GlobalGetAtomNameA SearchPathA OpenWaitableTimerA LoadLibraryA ProcessIdToSessionId OpenWaitableTimerW WriteProfileSectionW GetOEMCP GetProcessShutdownParameters FreeEnvironmentStringsW CompareStringA GetFileTime GetWindowsDirectoryW DeleteTimerQueueTimer DeleteFileW AddConsoleAliasA CloseHandle CreateFileW GetCommandLineW HeapSetInformation SetUnhandledExceptionFilter QueryPerformanceCounter GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime InterlockedIncrement DecodePointer ExitProcess GetEnvironmentStringsW SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection HeapValidate EncodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree GetLastError HeapCreate WriteFile GetACP GetCPInfo IsValidCodePage EnterCriticalSection LeaveCriticalSection LoadLibraryW TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent HeapAlloc GetModuleFileNameA HeapReAlloc HeapSize HeapQueryInformation HeapFree RtlUnwind WideCharToMultiByte LCMapStringW MultiByteToWideChar GetStringTypeW OutputDebugStringA WriteConsoleW IsProcessorFeaturePresent SetFilePointer GetConsoleCP GetConsoleMode RaiseException SetStdHandle FlushFileBuffers

user32

GetAltTabInfoW

Sharing

General

Malware Config

Signatures

File Explorer

dc0237cdde1a733c79f39fd8d6bc01643af8d3d5d02984761d032d98e7f9cf8b

kernel32

user32

generic