dbba87ae9dbc79667c819d5be3c6d14c009a56587c2e7b057929ac0856379677

General

Target
dbba87ae9dbc79667c819d5be3c6d14c009a56587c2e7b057929ac0856379677
Size 410KB
Sample241111-hs8jssvfjp
SHA256 dbba87ae9dbc79667c819d5be3c6d14c009a56587c2e7b057929ac0856379677
MD5 f05abdb30bec0c89f59bf8a130c68f71
SHA1 fd1c35ce88608baefb5102cca3e4c0d90ff67e0c
SHA512 1e45d014d8708057decb3083e020fce578862224a22216e4b7a592af885497dc52765d32970f3c93b2d49047e59311a36e6f25bede6bc4881cf1fd0f430ae6c0
SSDEEP 6144:xe7JNLtZXhjwNjndQBvVDFcK5ykXWxpyk11EcQx06SnBz:oJNLFwhd4VDFrykXWxpyKEcQx07B
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dbba87ae9dbc79667c819d5be3c6d14c009a56587c2e7b057929ac0856379677

File Explorer

dbba87ae9dbc79667c819d5be3c6d14c009a56587c2e7b057929ac0856379677

.exe 410KB

dbba87ae9dbc79667c819d5be3c6d14c009a56587c2e7b057929ac0856379677

IMPHASH cd2e8aca313b88a16bc7b305a3f26143
SHA256 dbba87ae9dbc79667c819d5be3c6d14c009a56587c2e7b057929ac0856379677
MD5 f05abdb30bec0c89f59bf8a130c68f71
SHA1 fd1c35ce88608baefb5102cca3e4c0d90ff67e0c
SHA512 1e45d014d8708057decb3083e020fce578862224a22216e4b7a592af885497dc52765d32970f3c93b2d49047e59311a36e6f25bede6bc4881cf1fd0f430ae6c0
SSDEEP 6144:xe7JNLtZXhjwNjndQBvVDFcK5ykXWxpyk11EcQx06SnBz:oJNLFwhd4VDFrykXWxpyKEcQx07B
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

214432

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\jibazuzivalus55 tedob.pdb

kernel32

OpenFileMappingA FindFirstVolumeW TerminateProcess FatalExit GetVersionExA CopyFileExA GetConsoleCP VerifyVersionInfoA VerLanguageNameW GetDriveTypeW FindFirstChangeNotificationA FreeEnvironmentStringsW GetProcessPriorityBoost SetVolumeMountPointA GetLongPathNameA CopyFileW TlsGetValue VerifyVersionInfoW GetConsoleCursorInfo SystemTimeToTzSpecificLocalTime GetProcessShutdownParameters MultiByteToWideChar GetNamedPipeHandleStateA BuildCommDCBAndTimeoutsW GetProcAddress GetModuleHandleA GlobalAlloc Sleep MoveFileW GetCommandLineA InterlockedDecrement DeleteFileW GetVolumePathNamesForVolumeNameW GetPrivateProfileStringA GetPrivateProfileIntA HeapSize GetProcessHeap CreateNamedPipeA SetFileShortNameW GetStartupInfoW GetEnvironmentVariableA GetCPInfoExA GetWindowsDirectoryA GetSystemWow64DirectoryA GetLastError WriteProfileSectionW GetCalendarInfoW SetLastError GetExitCodeThread DebugBreak FindFirstFileA ReadFileScatter ReadFile SetDefaultCommConfigA GetNumberOfConsoleMouseButtons GlobalWire WritePrivateProfileSectionA WriteProfileStringA lstrcatW FindCloseChangeNotification CreateActCtxW InterlockedPopEntrySList InterlockedExchange SetConsoleTitleW DefineDosDeviceW LoadLibraryA WritePrivateProfileStringA WaitNamedPipeW GetConsoleMode HeapSetInformation UnregisterWait PeekConsoleInputA GetNumberFormatA DeleteFileA LoadModule GetPrivateProfileSectionNamesW FindResourceExA EnumTimeFormatsA SetLocalTime FindNextFileA FindFirstFileW FreeEnvironmentStringsA CreateSemaphoreW OutputDebugStringW SetFileShortNameA lstrcpyW HeapWalk CreateHardLinkW RaiseException GetSystemTime UnlockFile EnumCalendarInfoExA MoveFileExA SetConsoleScreenBufferSize SearchPathW IsBadStringPtrW GetAtomNameA GetConsoleAliasExesLengthA WriteConsoleInputW LocalLock SetCommState EnumSystemLocalesA GetNumaHighestNodeNumber SetEndOfFile ResetWriteWatch SetUnhandledExceptionFilter OpenSemaphoreW GetLargestConsoleWindowSize GetProfileStringW ReleaseActCtx EnumDateFormatsW SetSystemTimeAdjustment OpenMutexW GetComputerNameA HeapValidate CommConfigDialogA OpenMutexA GetStringTypeA SetSystemPowerState FindResourceW SetTimerQueueTimer EnumResourceNamesW GetProcessTimes RegisterWaitForSingleObject IsBadReadPtr GetCurrentProcessId FatalAppExitW GetFileAttributesW lstrcpynW DisconnectNamedPipe FillConsoleOutputCharacterA GetCompressedFileSizeA GetFullPathNameA WriteProfileStringW SetInformationJobObject GlobalAddAtomA EnumDateFormatsA TerminateJobObject QueryDosDeviceA LeaveCriticalSection SetCurrentDirectoryA CreateTimerQueueTimer GetBinaryTypeA CloseHandle CreateFileW SetStdHandle EncodePointer DecodePointer GetCommandLineW TlsAlloc TlsSetValue GetCurrentThreadId TlsFree GetModuleHandleW InterlockedIncrement IsProcessorFeaturePresent QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime ExitProcess GetModuleFileNameW GetEnvironmentStringsW SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection HeapCreate WriteFile GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection GetACP GetOEMCP GetCPInfo IsValidCodePage RtlUnwind LoadLibraryW HeapAlloc GetModuleFileNameA HeapReAlloc HeapQueryInformation HeapFree WideCharToMultiByte LCMapStringW GetStringTypeW OutputDebugStringA WriteConsoleW SetFilePointer FlushFileBuffers

user32

GetMenuItemID GetCursorInfo

Sharing

General

Malware Config

Signatures

File Explorer

dbba87ae9dbc79667c819d5be3c6d14c009a56587c2e7b057929ac0856379677

kernel32

user32

generic