1726b7f4069755f3de2738c1cb24b83390d08815705d36e2b08fa9a3969000a0

General

Target
1726b7f4069755f3de2738c1cb24b83390d08815705d36e2b08fa9a3969000a0
Size 449KB
Sample241111-hpkzbstrc1
SHA256 1726b7f4069755f3de2738c1cb24b83390d08815705d36e2b08fa9a3969000a0
MD5 83e0aac95c306bf0e4b1d8efba04d8bd
SHA1 14c8ff0da386e531046f0085994771babbc16931
SHA512 cf8aef9f0d63be400615fc98d77b3b354481233ee5ba5554157932d6f2643ba1d171238c14c578ddaaa4ae7c70b7aa143ddbcfee2a20b74fa426d56e4de98aa6
SSDEEP 12288:V3Gt7HUAjeicDtkh/Jbo+W/R5zp87y6z4lQe0bj:UWAjeZyo/+7dz4lWbj
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1726b7f4069755f3de2738c1cb24b83390d08815705d36e2b08fa9a3969000a0

File Explorer

1726b7f4069755f3de2738c1cb24b83390d08815705d36e2b08fa9a3969000a0

.exe 449KB

1726b7f4069755f3de2738c1cb24b83390d08815705d36e2b08fa9a3969000a0

IMPHASH 5f946d692b9af0e7c99e0dbbc04fd013
SHA256 1726b7f4069755f3de2738c1cb24b83390d08815705d36e2b08fa9a3969000a0
MD5 83e0aac95c306bf0e4b1d8efba04d8bd
SHA1 14c8ff0da386e531046f0085994771babbc16931
SHA512 cf8aef9f0d63be400615fc98d77b3b354481233ee5ba5554157932d6f2643ba1d171238c14c578ddaaa4ae7c70b7aa143ddbcfee2a20b74fa426d56e4de98aa6
SSDEEP 12288:V3Gt7HUAjeicDtkh/Jbo+W/R5zp87y6z4lQe0bj:UWAjeZyo/+7dz4lWbj
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

50736

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\kujumegujix23_sayeb\paxazuno\koveya81\semedovojuwab60.pdb

kernel32

WriteProfileSectionA SetLocaleInfoA FindFirstVolumeA GetNamedPipeHandleStateW CompareFileTime EnumResourceTypesA EnumResourceNamesA FillConsoleOutputCharacterW GetTimeZoneInformation TerminateThread SignalObjectAndWait GetVersionExW VerifyVersionInfoA QueryDepthSList SetEvent FindNextFileA BuildCommDCBAndTimeoutsA GetCompressedFileSizeA CopyFileExW ReadConsoleOutputCharacterA SetDefaultCommConfigW VerLanguageNameA EscapeCommFunction WritePrivateProfileStructA FreeEnvironmentStringsA CreateTimerQueue FindNextVolumeMountPointA ResetWriteWatch WriteConsoleInputA SetComputerNameExA FindAtomA LoadResource GetThreadPriority CallNamedPipeW BuildCommDCBAndTimeoutsW VirtualProtect GetModuleHandleA LocalAlloc GlobalUnfix GetProfileSectionA GetCommandLineA InterlockedExchange FindFirstChangeNotificationW GetCalendarInfoA ReleaseActCtx OutputDebugStringW FormatMessageA SetDllDirectoryW GetModuleHandleW WritePrivateProfileStringA GetUserDefaultLangID TerminateProcess GlobalFix GetVersionExA HeapValidate InterlockedCompareExchange CopyFileA GetLastError SetCalendarInfoW DebugBreak SetConsoleTextAttribute SetLastError GetSystemWow64DirectoryW GetStartupInfoW GetComputerNameExW GetCPInfoExW ContinueDebugEvent InterlockedExchangeAdd GetSystemWindowsDirectoryW GetACP GetPrivateProfileStringA CreateActCtxA GetConsoleAliasW OutputDebugStringA lstrlenA WriteConsoleA GlobalWire FormatMessageW GetPrivateProfileSectionNamesW GetSystemTimeAsFileTime EnumCalendarInfoA SetThreadAffinityMask VerSetConditionMask CreateConsoleScreenBuffer GetSystemWindowsDirectoryA GetProfileStringW CreateIoCompletionPort AllocConsole GlobalGetAtomNameW SetComputerNameW GetConsoleAliasExesLengthA WriteConsoleInputW CreateMailslotW GetCommState SetThreadContext GetSystemTimeAdjustment _lwrite _lopen EnumSystemLocalesW GetConsoleAliasExesLengthW MoveFileA GetWriteWatch GetPrivateProfileStringW EnumDateFormatsA DeleteAtom LoadLibraryW TlsFree SetFirmwareEnvironmentVariableW CommConfigDialogW GetConsoleAliasesLengthA CancelDeviceWakeupRequest AreFileApisANSI OpenWaitableTimerA OpenFileMappingA SetProcessAffinityMask GetConsoleAliasesLengthW SetProcessShutdownParameters FillConsoleOutputCharacterA FindNextVolumeMountPointW SetThreadPriority ReadConsoleW AddAtomA WriteConsoleOutputCharacterW GetNumberFormatW GetConsoleAliasExesA GetBinaryTypeA EnterCriticalSection InitializeCriticalSection DisconnectNamedPipe LoadLibraryA DeleteFileA RaiseException GetStartupInfoA IsBadReadPtr DeleteCriticalSection LeaveCriticalSection GetModuleFileNameW GetProcAddress SetStdHandle GetFileType WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode Sleep InterlockedIncrement InterlockedDecrement ExitProcess TlsGetValue TlsAlloc TlsSetValue GetCurrentThreadId SetHandleCount GetStdHandle GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent QueryPerformanceCounter GetTickCount GetCurrentProcessId GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW HeapDestroy HeapCreate HeapFree VirtualFree HeapAlloc HeapSize HeapReAlloc VirtualAlloc GetOEMCP GetCPInfo IsValidCodePage RtlUnwind InitializeCriticalSectionAndSpinCount WriteConsoleW GetConsoleOutputCP MultiByteToWideChar SetFilePointer LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA CreateFileA CloseHandle FlushFileBuffers

gdi32

GetBoundsRect

winhttp

WinHttpConnect

msimg32

AlphaBlend

Sharing

General

Malware Config

Signatures

File Explorer

1726b7f4069755f3de2738c1cb24b83390d08815705d36e2b08fa9a3969000a0

kernel32

gdi32

winhttp

msimg32

generic