822209444983a6daa9a7d1f0c808c858

General

Target
822209444983a6daa9a7d1f0c808c858
Size 407KB
Sample241111-ky5ffawmav
SHA256 4d8acc40915bb9c8bf5b7b1ab3ea49318da8cefce6b88b80471534a57fb7d37c
MD5 822209444983a6daa9a7d1f0c808c858
SHA1 3cddb479c4ed0f0966690ce2bf3d8225ce778033
SHA512 db429e48f4e1a7b3aafa552d8a305094907869ac0ff3883fca4da0b5fec2a0aaf9f71a0f10b67be1be62dc67052ee6be116acc31c2656253afc9611ea60f7a4e
SSDEEP 12288:9EviK64KoYNu/FtIvxWXTtGMvDfGMx9IPN8:L4KoyM8WXTtGgDfGy9IP
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
822209444983a6daa9a7d1f0c808c858

File Explorer

822209444983a6daa9a7d1f0c808c858

.exe 407KB

822209444983a6daa9a7d1f0c808c858

IMPHASH 5dabb44f23597143e9b874503cbd5a26
SHA256 4d8acc40915bb9c8bf5b7b1ab3ea49318da8cefce6b88b80471534a57fb7d37c
MD5 822209444983a6daa9a7d1f0c808c858
SHA1 3cddb479c4ed0f0966690ce2bf3d8225ce778033
SHA512 db429e48f4e1a7b3aafa552d8a305094907869ac0ff3883fca4da0b5fec2a0aaf9f71a0f10b67be1be62dc67052ee6be116acc31c2656253afc9611ea60f7a4e
SSDEEP 12288:9EviK64KoYNu/FtIvxWXTtGMvDfGMx9IPN8:L4KoyM8WXTtGgDfGy9IP
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

51376

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\xox\werikuhariva sakabujo-novibe-8.pdb

kernel32

WriteProfileSectionA SetLocaleInfoA FindFirstVolumeA GetNamedPipeHandleStateW CompareFileTime EnumResourceTypesA EnumResourceNamesA FillConsoleOutputCharacterW GetTimeZoneInformation TerminateThread SignalObjectAndWait GetVersionExW VerifyVersionInfoA QueryDepthSList SetEvent FindNextFileA BuildCommDCBAndTimeoutsA GetCompressedFileSizeA CopyFileExW ReadConsoleOutputCharacterA SetDefaultCommConfigW VerLanguageNameA EscapeCommFunction WritePrivateProfileStructA FreeEnvironmentStringsA CreateTimerQueue FindNextVolumeMountPointA ResetWriteWatch WriteConsoleInputA SetComputerNameExA FindAtomA LoadResource GetThreadPriority CallNamedPipeW BuildCommDCBAndTimeoutsW VirtualProtect LocalAlloc GetProfileSectionA GetCommandLineA InterlockedExchange FindFirstChangeNotificationW GetCalendarInfoA ReleaseActCtx OutputDebugStringW FormatMessageA SetDllDirectoryW GetModuleHandleW WritePrivateProfileStringA GetUserDefaultLangID TerminateProcess GlobalFix HeapValidate InterlockedCompareExchange GetStartupInfoW SetCalendarInfoW DebugBreak SetConsoleTextAttribute GetLastError CopyFileA DisconnectNamedPipe GetCPInfoExW GetComputerNameExW ContinueDebugEvent InterlockedExchangeAdd GetSystemWindowsDirectoryW GetACP GetPrivateProfileStringA CreateActCtxA GetConsoleAliasW lstrlenA WriteConsoleA GlobalWire FormatMessageW GetPrivateProfileSectionNamesA GetSystemTimeAsFileTime EnumCalendarInfoA SetThreadAffinityMask VerSetConditionMask CreateConsoleScreenBuffer GetSystemWindowsDirectoryA GetProfileStringW CreateIoCompletionPort AllocConsole GlobalGetAtomNameW SetComputerNameW GetConsoleAliasExesLengthA WriteConsoleInputW CreateMailslotW GetCommState SetThreadContext GetSystemTimeAdjustment _lwrite _lopen EnumSystemLocalesW GetConsoleAliasExesLengthW MoveFileA GetWriteWatch GetPrivateProfileStringW GetModuleHandleA EnumDateFormatsA DeleteAtom LoadLibraryW TlsFree SetFirmwareEnvironmentVariableW CommConfigDialogW GetConsoleAliasesLengthA CancelDeviceWakeupRequest AreFileApisANSI OpenWaitableTimerW OpenFileMappingW SetProcessAffinityMask GetConsoleAliasesLengthW SetProcessShutdownParameters FindNextVolumeMountPointW SetThreadPriority ReadConsoleW AddAtomA WriteConsoleOutputCharacterW GetNumberFormatW GetConsoleAliasExesA GetBinaryTypeA EnterCriticalSection InitializeCriticalSection GetSystemWow64DirectoryW LoadLibraryA DeleteFileA RaiseException GetStartupInfoA IsBadReadPtr DeleteCriticalSection LeaveCriticalSection GetModuleFileNameW GetProcAddress SetStdHandle GetFileType WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode Sleep InterlockedIncrement InterlockedDecrement ExitProcess TlsGetValue TlsAlloc TlsSetValue GetCurrentThreadId SetLastError SetHandleCount GetStdHandle GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent QueryPerformanceCounter GetTickCount GetCurrentProcessId GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW HeapDestroy HeapCreate HeapFree VirtualFree HeapAlloc HeapSize HeapReAlloc VirtualAlloc GetOEMCP GetCPInfo IsValidCodePage RtlUnwind InitializeCriticalSectionAndSpinCount OutputDebugStringA WriteConsoleW GetConsoleOutputCP MultiByteToWideChar SetFilePointer LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA CreateFileA CloseHandle FlushFileBuffers

gdi32

GetBoundsRect

winhttp

WinHttpConnect

msimg32

AlphaBlend

Sharing

General

Malware Config

Signatures

File Explorer

822209444983a6daa9a7d1f0c808c858

kernel32

gdi32

winhttp

msimg32

generic