5983978d8fafe756b38eec2a52646f06792798f0

General

Target
5983978d8fafe756b38eec2a52646f06792798f0
Size 364KB
Sample241111-gdgbbstfqj
SHA256 0511eb67c1649840e53fa4f6fd8874c22c6a850d7f11a4a01b7740f1c7bdafae
MD5 329532e365ae0aefb5507bc91e4f6815
SHA1 5983978d8fafe756b38eec2a52646f06792798f0
SHA512 052c11a4cc912340436ed6ecd6795171937aec9e8f68047fb60e5ca44b3a20fd55a71460a7620ffbf5f89ce10da15b0232278bd4218ba2b1a9ece03ccd6b3ac5
SSDEEP 6144:CX8Nhevp6s4aR9kSiY8T+VM1Tgg+0kOCQD2MtgfSedyiTIsVW:CX8NhCp54aR9kSiY7ilgH0kOC+2M815z
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5983978d8fafe756b38eec2a52646f06792798f0

File Explorer

5983978d8fafe756b38eec2a52646f06792798f0

.exe 364KB

5983978d8fafe756b38eec2a52646f06792798f0

IMPHASH b828dbe7876362a0da24f9a17767ce0a
SHA256 0511eb67c1649840e53fa4f6fd8874c22c6a850d7f11a4a01b7740f1c7bdafae
MD5 329532e365ae0aefb5507bc91e4f6815
SHA1 5983978d8fafe756b38eec2a52646f06792798f0
SHA512 052c11a4cc912340436ed6ecd6795171937aec9e8f68047fb60e5ca44b3a20fd55a71460a7620ffbf5f89ce10da15b0232278bd4218ba2b1a9ece03ccd6b3ac5
SSDEEP 6144:CX8Nhevp6s4aR9kSiY8T+VM1Tgg+0kOCQD2MtgfSedyiTIsVW:CX8NhCp54aR9kSiY7ilgH0kOC+2M815z
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

57216

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\gucugewixil\nayeyupu kanusejemokimu so.pdb

kernel32

OpenMutexW SetLocaleInfoA FindNextVolumeW GetNamedPipeHandleStateA FileTimeToLocalFileTime EnumResourceTypesA EnumResourceNamesA FillConsoleOutputCharacterA CreateMailslotW TerminateThread SetLastError GetVersionExW FreeResource FindNextFileA CopyFileExA BuildCommDCBA SetDefaultCommConfigA VerLanguageNameA GetCommConfig WritePrivateProfileStructW LocalShrink DeleteTimerQueueTimer ReadConsoleInputA WriteConsoleInputW LoadResource AddAtomW SearchPathW GetThreadPriority CallNamedPipeW GetDriveTypeA BuildCommDCBAndTimeoutsW VirtualProtect LoadLibraryA GlobalAlloc SetThreadIdealProcessor GetProfileSectionW DeleteFileA FindFirstChangeNotificationW VerifyVersionInfoA FormatMessageW SetDllDirectoryA GetModuleHandleW GetNamedPipeHandleStateW WritePrivateProfileStringW GetUserDefaultLCID CancelWaitableTimer InterlockedIncrement GetStartupInfoA GetSystemWow64DirectoryA CopyFileW GetLastError SetCalendarInfoA DebugBreak SetConsoleTextAttribute FreeLibraryAndExitThread GetModuleFileNameW OpenFileMappingA lstrcmpA ReadFileScatter FlushConsoleInputBuffer WaitForDebugEvent DisableThreadLibraryCalls InterlockedExchangeAdd GlobalFix GetSystemWindowsDirectoryW GetOEMCP GlobalFindAtomW lstrcatA GetPrivateProfileStringA SetMailslotInfo CreateActCtxW ReadConsoleInputW OutputDebugStringW PulseEvent SetThreadAffinityMask SetConsoleActiveScreenBuffer lstrlenA LoadLibraryW WriteConsoleA GetProcAddress lstrcpyA EndUpdateResourceW VerSetConditionMask GetConsoleCP GetQueuedCompletionStatus FreeConsole GlobalGetAtomNameW SetComputerNameW GetConsoleAliasExesLengthA SystemTimeToTzSpecificLocalTime MoveFileWithProgressA GetStringTypeExA EnumSystemLocalesW GetPrivateProfileIntA OpenWaitableTimerA GetConsoleAliasesLengthA PeekNamedPipe FillConsoleOutputCharacterW WriteConsoleOutputCharacterW TerminateJobObject GetConsoleAliasExesA EnumDateFormatsA InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind ExitProcess GetStartupInfoW HeapValidate IsBadReadPtr TlsGetValue TlsAlloc TlsSetValue GetCurrentThreadId TlsFree GetStdHandle WriteFile OutputDebugStringA WriteConsoleW GetFileType GetModuleFileNameA GetACP GetCPInfo IsValidCodePage InitializeCriticalSectionAndSpinCount SetHandleCount QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapDestroy HeapCreate HeapFree VirtualFree FlushFileBuffers WideCharToMultiByte GetConsoleMode HeapAlloc HeapSize HeapReAlloc VirtualAlloc MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetFilePointer SetStdHandle GetConsoleOutputCP CloseHandle CreateFileA

Sharing

General

Malware Config

Signatures

File Explorer

5983978d8fafe756b38eec2a52646f06792798f0

kernel32

generic