d688a4d880fb0c2aaa5add8a61b225dedadeac1bcb639acaad2daa12bc44f104

General

Target
d688a4d880fb0c2aaa5add8a61b225dedadeac1bcb639acaad2daa12bc44f104
Size 423KB
Sample241111-hfcllavdkj
SHA256 d688a4d880fb0c2aaa5add8a61b225dedadeac1bcb639acaad2daa12bc44f104
MD5 c188b6f337be203702a9c8f8c4a9fdf3
SHA1 24fcfd07b3523983a37ec0686a0ecba8c955e59e
SHA512 a9ea52b9046b8c63b828b39ead976557a7ffbbfa8185d248a30c621baff289a0fa3b3da2191b1826affa0a55bacdc7d58df27cdb48c24379e9afe9d84e537623
SSDEEP 6144:zKfV9DPD5ZU4u3ea/vVYSyW9Jhh4V1EzUhLkYFdk4elBPhSfai:zmVxb5a4u3eI2Sy/V1EzUhLkielBPD
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d688a4d880fb0c2aaa5add8a61b225dedadeac1bcb639acaad2daa12bc44f104

File Explorer

d688a4d880fb0c2aaa5add8a61b225dedadeac1bcb639acaad2daa12bc44f104

.exe 423KB

d688a4d880fb0c2aaa5add8a61b225dedadeac1bcb639acaad2daa12bc44f104

IMPHASH a2bd4353e1ced7b42b3a08381e3a1a2d
SHA256 d688a4d880fb0c2aaa5add8a61b225dedadeac1bcb639acaad2daa12bc44f104
MD5 c188b6f337be203702a9c8f8c4a9fdf3
SHA1 24fcfd07b3523983a37ec0686a0ecba8c955e59e
SHA512 a9ea52b9046b8c63b828b39ead976557a7ffbbfa8185d248a30c621baff289a0fa3b3da2191b1826affa0a55bacdc7d58df27cdb48c24379e9afe9d84e537623
SSDEEP 6144:zKfV9DPD5ZU4u3ea/vVYSyW9Jhh4V1EzUhLkYFdk4elBPhSfai:zmVxb5a4u3eI2Sy/V1EzUhLkielBPD
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

214688

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\noju\dupemoporirej54-huxawohuv\liniyisubupa\zenuhuxo30-yih.pdb

kernel32

ExitProcess GetComputerNameA GetFullPathNameA LocalUnlock GetThreadContext EnumResourceNamesW GlobalMemoryStatus FindResourceA FindFirstFileW FindFirstChangeNotificationW WriteConsoleInputW SetFilePointer TryEnterCriticalSection EnumDateFormatsExW CopyFileExW GetNumaProcessorNode TlsGetValue GetStringTypeA SetLocalTime UnmapViewOfFile MoveFileExA CommConfigDialogA BuildCommDCBAndTimeoutsA SetUnhandledExceptionFilter GlobalAddAtomA MoveFileExW InterlockedDecrement WritePrivateProfileSectionA SetDefaultCommConfigW SetFirmwareEnvironmentVariableA CreateJobObjectW QueryDosDeviceA GetNamedPipeHandleStateA GlobalLock SetVolumeMountPointW SetEvent SetThreadExecutionState SleepEx FreeEnvironmentStringsA _lclose OutputDebugStringW GetCommConfig GetPrivateProfileStringW CreateRemoteThread GetCompressedFileSizeW WaitNamedPipeW EnumTimeFormatsA SetCommState GetSystemWow64DirectoryA WriteFileGather TzSpecificLocalTimeToSystemTime TlsSetValue AllocateUserPhysicalPages FindResourceExA GetConsoleCP GetPrivateProfileIntA LoadLibraryW GetConsoleMode FatalAppExitW GetThreadSelectorEntry CopyFileW GetPrivateProfileStructW GetCalendarInfoA SetSystemTimeAdjustment GetProcessHandleCount GetSystemWindowsDirectoryA ReadConsoleOutputW GetConsoleAliasExesLengthW GetSystemTimeAdjustment GetVersionExW SetConsoleCP DeleteVolumeMountPointW LeaveCriticalSection GetFileAttributesA lstrcpynW SetDllDirectoryA SetConsoleMode HeapValidate GetVolumePathNamesForVolumeNameW SetConsoleCursorPosition GetBinaryTypeA IsBadWritePtr TerminateProcess GetModuleFileNameW CreateActCtxA lstrcmpW lstrlenW IsBadStringPtrA GetTempPathW EnumSystemLocalesA VerifyVersionInfoW SetCurrentDirectoryA GetCPInfoExW OpenMutexW GetLastError GetLongPathNameW SetLastError GetProcAddress GetProcessHeaps VirtualAlloc HeapSize PeekConsoleInputW BackupWrite CreateNamedPipeA EnumDateFormatsExA CreateTimerQueueTimer CreateJobSet LocalLock SetStdHandle EnterCriticalSection VerLanguageNameW SearchPathA BuildCommDCBW DefineDosDeviceA GetPrivateProfileStringA GetAtomNameA OpenMutexA CreateSemaphoreW LocalAlloc WritePrivateProfileStringA CreateHardLinkW GetExitCodeThread GetNumberFormatW SetCurrentDirectoryW SetFileApisToANSI VirtualLock GetCurrentConsoleFont HeapWalk GetPrivateProfileStructA SetSystemTime SetEnvironmentVariableA GetVolumePathNamesForVolumeNameA GetModuleFileNameA GetPrivateProfileSectionNamesA GetDefaultCommConfigA FindNextFileA WriteProfileStringA WTSGetActiveConsoleSessionId EnumDateFormatsA CreateIoCompletionPort SetConsoleTitleW GetModuleHandleA QueueUserWorkItem ContinueDebugEvent lstrcatW HeapSetInformation FatalExit FreeEnvironmentStringsW GetConsoleTitleW RequestWakeupLatency EnumDateFormatsW CompareStringA GetFileAttributesExW GetConsoleCursorInfo FatalAppExitA WriteConsoleOutputAttribute OutputDebugStringA DuplicateHandle SetProcessShutdownParameters OpenSemaphoreW FindFirstVolumeA TerminateJobObject DeleteTimerQueueTimer DeleteFileW GetCurrentProcessId SetFileValidData FindActCtxSectionStringW ResetWriteWatch UnregisterWaitEx InterlockedPushEntrySList CopyFileExA lstrcpyA MoveFileA DeleteFileA EncodePointer DecodePointer GetCommandLineW GetStartupInfoW InterlockedIncrement GetModuleHandleW GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent WriteFile GetStdHandle IsBadReadPtr TlsAlloc GetCurrentThreadId TlsFree SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetEnvironmentStringsW HeapCreate GetACP GetOEMCP GetCPInfo IsValidCodePage RtlUnwind HeapAlloc HeapReAlloc HeapQueryInformation HeapFree WideCharToMultiByte WriteConsoleW LCMapStringW MultiByteToWideChar GetStringTypeW IsProcessorFeaturePresent FlushFileBuffers RaiseException CloseHandle CreateFileW

Sharing

General

Malware Config

Signatures

File Explorer

d688a4d880fb0c2aaa5add8a61b225dedadeac1bcb639acaad2daa12bc44f104

kernel32

generic