528bcc3e8b9596e2040ef8cafd455453f8a0a5c224a2e0befc0f16f2ef77a514

General

Target
528bcc3e8b9596e2040ef8cafd455453f8a0a5c224a2e0befc0f16f2ef77a514
Size 411KB
Sample241111-hm325avhmd
SHA256 528bcc3e8b9596e2040ef8cafd455453f8a0a5c224a2e0befc0f16f2ef77a514
MD5 11466489248e2b9c7433417cc3ecc58f
SHA1 4849abcb9d2fdaa41509b5fc092a2aad9af1d7ed
SHA512 c07cb2acf132a80ef661c824fdb3ef92c0711042049e38abb47c0c2874607822bc2550cf986b3832fb2124754745e0b84489ece97b867aa6670a3a0d5b2f1181
SSDEEP 12288:QOHOqFFCzvGUHZ1olS7wAxlSoEYInaHqL:nFHW/4SioEYfKL
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
528bcc3e8b9596e2040ef8cafd455453f8a0a5c224a2e0befc0f16f2ef77a514

File Explorer

528bcc3e8b9596e2040ef8cafd455453f8a0a5c224a2e0befc0f16f2ef77a514

.exe 411KB

528bcc3e8b9596e2040ef8cafd455453f8a0a5c224a2e0befc0f16f2ef77a514

IMPHASH 4ee83624426d72301d5dc28b390adabc
SHA256 528bcc3e8b9596e2040ef8cafd455453f8a0a5c224a2e0befc0f16f2ef77a514
MD5 11466489248e2b9c7433417cc3ecc58f
SHA1 4849abcb9d2fdaa41509b5fc092a2aad9af1d7ed
SHA512 c07cb2acf132a80ef661c824fdb3ef92c0711042049e38abb47c0c2874607822bc2550cf986b3832fb2124754745e0b84489ece97b867aa6670a3a0d5b2f1181
SSDEEP 12288:QOHOqFFCzvGUHZ1olS7wAxlSoEYInaHqL:nFHW/4SioEYfKL
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

214512

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\sicijur\wecuxowixa-dan\ros.pdb

kernel32

OpenFileMappingA FindFirstVolumeW TerminateProcess FatalExit GetVersionExA CopyFileExA GetConsoleCP VerifyVersionInfoA VerLanguageNameW GetDriveTypeW FindFirstChangeNotificationA FreeEnvironmentStringsW GetProcessPriorityBoost SetVolumeMountPointA GetLongPathNameA CopyFileW TlsGetValue VerifyVersionInfoW GetConsoleCursorInfo SystemTimeToTzSpecificLocalTime GetProcessShutdownParameters MultiByteToWideChar GetNamedPipeHandleStateA BuildCommDCBAndTimeoutsW GetProcAddress GetModuleHandleA GlobalAlloc Sleep MoveFileW GetCommandLineA InterlockedDecrement DeleteFileW GetVolumePathNamesForVolumeNameW GetPrivateProfileStringA GetPrivateProfileIntA HeapSize GetProcessHeap CreateNamedPipeW SetFileShortNameW GetStartupInfoW GetEnvironmentVariableA GetCPInfoExA GetWindowsDirectoryA GetSystemWow64DirectoryA GetLastError WriteProfileSectionW GetCalendarInfoW SetLastError GetExitCodeThread DebugBreak ReadFileScatter ReadFile SetDefaultCommConfigA GetNumberOfConsoleMouseButtons GlobalWire WritePrivateProfileSectionA WriteProfileStringA lstrcatW FindCloseChangeNotification CreateActCtxW InterlockedPopEntrySList InterlockedExchange SetConsoleTitleW DefineDosDeviceA LoadLibraryA WritePrivateProfileStringA WaitNamedPipeW GetConsoleMode UnregisterWait PeekConsoleInputA GetNumberFormatA FindResourceExA FindNextFileA FindFirstFileW FreeEnvironmentStringsA CreateSemaphoreW EnumTimeFormatsA SetLocalTime OutputDebugStringW SetFileShortNameA lstrcpyW HeapWalk CreateHardLinkW RaiseException GetSystemTime UnlockFile EnumCalendarInfoExA MoveFileExA SetConsoleScreenBufferSize SearchPathW IsBadStringPtrW GetAtomNameA GetConsoleAliasExesLengthA WriteConsoleInputW LocalLock EnumDateFormatsW SetCommState SetSystemTimeAdjustment EnumSystemLocalesA GetNumaHighestNodeNumber SetEndOfFile ResetWriteWatch SetUnhandledExceptionFilter OpenSemaphoreW GetLargestConsoleWindowSize GetProfileStringW ReleaseActCtx OpenMutexW GetComputerNameA HeapValidate CommConfigDialogW OpenMutexA GetStringTypeA SetSystemPowerState FindResourceW SetTimerQueueTimer EnumResourceNamesA GetProcessTimes RegisterWaitForSingleObject IsBadReadPtr GetCurrentProcessId FatalAppExitW GetFileAttributesW lstrcpynW DisconnectNamedPipe FillConsoleOutputCharacterA GetCompressedFileSizeA GetFullPathNameA WriteProfileStringW SetInformationJobObject GlobalAddAtomA EnumDateFormatsA TerminateJobObject QueryDosDeviceA LeaveCriticalSection CreateTimerQueueTimer SetCurrentDirectoryA FlushFileBuffers CloseHandle CreateFileW EncodePointer DecodePointer GetCommandLineW HeapSetInformation TlsAlloc TlsSetValue GetCurrentThreadId TlsFree GetModuleHandleW InterlockedIncrement IsProcessorFeaturePresent QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime ExitProcess GetModuleFileNameW GetEnvironmentStringsW SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection HeapCreate WriteFile GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection GetACP GetOEMCP GetCPInfo IsValidCodePage RtlUnwind LoadLibraryW HeapAlloc GetModuleFileNameA HeapReAlloc HeapQueryInformation HeapFree WideCharToMultiByte LCMapStringW GetStringTypeW OutputDebugStringA WriteConsoleW SetFilePointer SetStdHandle DeleteFileA

user32

GetMenuItemID GetCursorInfo

Sharing

General

Malware Config

Signatures

File Explorer

528bcc3e8b9596e2040ef8cafd455453f8a0a5c224a2e0befc0f16f2ef77a514

kernel32

user32

generic