7c34b797240e618befefa3f19450a7c05da517a35871480c64750e9b02b39148
- SHA256 7c34b797240e618befefa3f19450a7c05da517a35871480c64750e9b02b39148
Password
infected
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
72326770d1bd755efcb842041a772b6f5eb4c3c96362b1455c6274d837a48f49.exe
Resource
win7-20240903-en
windows7-x64
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
72326770d1bd755efcb842041a772b6f5eb4c3c96362b1455c6274d837a48f49.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
5 signatures
150 seconds
General
- Target 7c34b797240e618befefa3f19450a7c05da517a35871480c64750e9b02b39148
- Size 272KB
- Sample241111-gtk98avcrd
- SHA256 7c34b797240e618befefa3f19450a7c05da517a35871480c64750e9b02b39148
- MD5 60696d246a221b33a9de721a6c25cd45
- SHA1 5fe433981d8b5d44f3b16cd560bcf1814d180eea
- SHA512 1f616d01d3a12411a7f0bb59ed9d6b9255a83e62963efd9fe1e475b5e654543bbc3e6ec6802854049df040a10a0b4c833a8a1c53e8593c3e97a2157325b35222
- SSDEEP 6144:lsUXhMnqLPB0j9hm5HH8EttxcqY9vD73Op8OJpJOYj5g3:l3XhMoPapVIxcvh73bSu3
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/72326770d1bd755efcb842041a772b6f5eb4c3c96362b1455c6274d837a48f49.exe
File Explorer
-
7c34b797240e618befefa3f19450a7c05da517a35871480c64750e9b02b39148.zip 272KB
-
72326770d1bd755efcb842041a772b6f5eb4c3c96362b1455c6274d837a48f49.exe.exe 351KB
72326770d1bd755efcb842041a772b6f5eb4c3c96362b1455c6274d837a48f49.exe
- IMPHASH 21fd62d092190955a86dbb87c317401b
- SHA256 72326770d1bd755efcb842041a772b6f5eb4c3c96362b1455c6274d837a48f49
- MD5 f0f094662eca51040ca25f7c8d7356ec
- SHA1 332147d1b8bce7cdf9bc35d5d537a497d57208e6
- SHA512 675a482dc59cdb34d8e0b66ca34f8588e019ecde6d3635551f6e57e54a1f54b31c3155b369ed0d4ac3ac36a4504389ed8fc37d58513d3e52cdd86d03c6856f10
- SSDEEP 6144:cgfi7eLlQ+HuKKVWEKCr+5Is4yySB6hv4Jts+M4sESv6o:Hfi6BQ+JrCr+5b4/ScUDMs
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
5
Entry point
15334
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\karu60_satir\galuvofucib_xarem\gidofibo-desixa.pdb
kernel32
LoadLibraryW
CallNamedPipeW
EnumSystemCodePagesA
EnumDateFormatsA
OpenMutexA
GetConsoleAliasesLengthA
AreFileApisANSI
EnumCalendarInfoExA
RequestWakeupLatency
GetConsoleAliasA
GetModuleHandleA
CreateDirectoryExW
GetLogicalDriveStringsA
ReadConsoleInputW
FindNextVolumeMountPointA
SearchPathA
MoveFileA
CallNamedPipeA
GetCurrentDirectoryA
GetSystemDirectoryA
CreateMailslotA
CommConfigDialogW
GetProcAddress
LoadLibraryA
LocalAlloc
ChangeTimerQueueTimer
GetHandleInformation
CreateJobObjectA
ReadConsoleOutputAttribute
FindFirstVolumeA
LocalFree
GlobalFlags
CloseHandle
ZombifyActCtx
SetConsoleTextAttribute
AddAtomA
GetThreadPriority
FreeEnvironmentStringsW
GetConsoleTitleW
SetVolumeMountPointW
GetSystemWindowsDirectoryA
ClearCommError
lstrlenW
CreateDirectoryA
GlobalFindAtomW
OpenJobObjectW
CopyFileW
lstrcpynA
GetModuleHandleW
VerSetConditionMask
EnumSystemLocalesA
InterlockedFlushSList
WritePrivateProfileSectionA
GetStringTypeExW
GetFileAttributesW
DeactivateActCtx
CopyFileA
WriteFile
SetEvent
LocalCompact
LocalReAlloc
GlobalCompact
SetCommState
WriteConsoleInputA
SetHandleCount
FindResourceW
GetConsoleSelectionInfo
GetOverlappedResult
GetPrivateProfileStructA
ConvertThreadToFiber
InterlockedExchangeAdd
GetConsoleMode
GetConsoleAliasExesLengthA
EnumCalendarInfoW
InterlockedDecrement
GetTickCount
GetLastError
DeleteFileA
GetStartupInfoW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
Sleep
HeapSize
ExitProcess
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
GetEnvironmentStringsW
GetCommandLineW
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
RaiseException
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
HeapAlloc
HeapReAlloc
VirtualAlloc
InitializeCriticalSectionAndSpinCount
WideCharToMultiByte
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetConsoleCP
FlushFileBuffers
SetFilePointer
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
CreateFileA
Name
.text
Size
72KB
Virtual Size
71KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
187KB
Virtual Size
295KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
91KB
Virtual Size
91KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=21, id=149, productName=VS2008 build 21022, version=21022,
count=118, id=131, productName=VS2008 build 21022, version=21022,
count=3, id=123, productName=VS2005 build 50727, version=50727,
count=150, id=1, productName=Unmarked objects,
count=33, id=132, productName=VS2008 build 21022, version=21022,
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,