ddc02cd00d53e4827fdf7e175d3ea91c19b4b7351497a35a702577e5ee087c25

General

Target
ddc02cd00d53e4827fdf7e175d3ea91c19b4b7351497a35a702577e5ee087c25
Size 434KB
Sample241111-hvt47avfln
SHA256 ddc02cd00d53e4827fdf7e175d3ea91c19b4b7351497a35a702577e5ee087c25
MD5 5d72ecedda053a467111eec267426d52
SHA1 ee899503672dc7fd39e77ff404c4868caa565ccb
SHA512 4ce50d1344fb1486c4550abd07b9744562fe0331164688b152aacd363b496bb2e5242ac98b34e94ee9423ba04c0d16e5f40357472e83693798ae1f97f8e67951
SSDEEP 6144:IA/r6ksws1/whwnCWCDmV344pWNE20JvHoinidCso6URDkp6:J/rroDCWeW7sE20JPoinnso6UdK
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ddc02cd00d53e4827fdf7e175d3ea91c19b4b7351497a35a702577e5ee087c25

File Explorer

ddc02cd00d53e4827fdf7e175d3ea91c19b4b7351497a35a702577e5ee087c25

.exe 434KB

ddc02cd00d53e4827fdf7e175d3ea91c19b4b7351497a35a702577e5ee087c25

IMPHASH 9cae6f4a76061b40bb99bdb1c364f1a9
SHA256 ddc02cd00d53e4827fdf7e175d3ea91c19b4b7351497a35a702577e5ee087c25
MD5 5d72ecedda053a467111eec267426d52
SHA1 ee899503672dc7fd39e77ff404c4868caa565ccb
SHA512 4ce50d1344fb1486c4550abd07b9744562fe0331164688b152aacd363b496bb2e5242ac98b34e94ee9423ba04c0d16e5f40357472e83693798ae1f97f8e67951
SSDEEP 6144:IA/r6ksws1/whwnCWCDmV344pWNE20JvHoinidCso6URDkp6:J/rroDCWeW7sE20JPoinnso6UdK
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

224112

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\wep\puropinezekozo ne.pdb

kernel32

FindFirstVolumeW WaitForSingleObject GetNamedPipeHandleStateA CreateNamedPipeW CallNamedPipeW TerminateProcess FatalExit GetVersionExA CopyFileExW SetConsoleCP VerifyVersionInfoA VerLanguageNameW FindFirstFileExW FreeEnvironmentStringsW SetProcessPriorityBoost SetVolumeMountPointA GetLongPathNameW CopyFileA TlsGetValue VerifyVersionInfoW GetConsoleCursorInfo SystemTimeToTzSpecificLocalTime GetProcessShutdownParameters ReleaseSemaphore BuildCommDCBAndTimeoutsW GetProcAddress GetModuleHandleA GlobalAlloc Sleep MoveFileW GetCommandLineA InterlockedDecrement DeleteFileA GetVolumePathNamesForVolumeNameW SetFileAttributesA GetPrivateProfileIntW HeapSize GetProcessHeap CreateNamedPipeA WriteConsoleOutputW GetStartupInfoW GetDiskFreeSpaceExW GetCPInfoExW GetWindowsDirectoryA GetSystemWow64DirectoryA GetProfileStringW GetCalendarInfoA SetLastError GetExitCodeThread DebugBreak ReadFileScatter ReadFile SetDefaultCommConfigA GetNumberOfConsoleMouseButtons GlobalWire GetSystemWow64DirectoryW WriteProfileStringA lstrcatW FindCloseChangeNotification CreateActCtxA InterlockedPopEntrySList OutputDebugStringW InterlockedExchange DefineDosDeviceA LoadLibraryA WriteConsoleW SetSystemTimeAdjustment GetConsoleMode SetErrorMode UnregisterWaitEx PeekConsoleInputA GetNumberFormatA GetQueuedCompletionStatus FindResourceExA FindNextFileW FindFirstFileA FreeEnvironmentStringsA SetLocalTime EnumTimeFormatsW CreateSemaphoreW HeapSetInformation SetFileShortNameA lstrcpyA HeapWalk CreateHardLinkA RaiseException SetSystemTime LockFile EnumCalendarInfoExW MoveFileExW GetConsoleCP SetConsoleScreenBufferSize SearchPathW FreeConsole GetAtomNameW GetConsoleAliasExesLengthW WriteConsoleInputW LocalLock EnumDateFormatsW SetCommState GetSystemTimeAdjustment EnumSystemLocalesW GetNumaHighestNodeNumber SetEndOfFile GetWriteWatch SetUnhandledExceptionFilter OpenSemaphoreW GetLargestConsoleWindowSize ClearCommError ReleaseActCtx GetComputerNameA HeapValidate GetLastError OpenMutexW GetStringTypeA SetSystemPowerState VirtualUnlock SetWaitableTimer EnumResourceNamesA CreateTimerQueueTimer GetProcessTimes RegisterWaitForSingleObject IsBadWritePtr GetCurrentProcessId FatalAppExitA GetFileAttributesW lstrcpynW DisconnectNamedPipe FillConsoleOutputCharacterA GetCompressedFileSizeA FindNextVolumeMountPointW GetFullPathNameA WriteProfileStringW LockFileEx LeaveCriticalSection SetCurrentDirectoryA GlobalAddAtomW CloseHandle CreateFileW EncodePointer DecodePointer GetCommandLineW IsProcessorFeaturePresent TlsAlloc TlsSetValue GetCurrentThreadId TlsFree GetModuleHandleW InterlockedIncrement ExitProcess IsBadReadPtr GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW WriteFile GetStdHandle QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection HeapCreate GetACP GetOEMCP GetCPInfo IsValidCodePage EnterCriticalSection RtlUnwind LoadLibraryW HeapAlloc GetModuleFileNameA HeapReAlloc HeapQueryInformation HeapFree WideCharToMultiByte LCMapStringW MultiByteToWideChar GetStringTypeW OutputDebugStringA SetFilePointer SetStdHandle FlushFileBuffers

user32

GetMenuItemID

Sharing

General

Malware Config

Signatures

File Explorer

ddc02cd00d53e4827fdf7e175d3ea91c19b4b7351497a35a702577e5ee087c25

kernel32

user32

generic