f2293c63cafefb53048a347ba6f2b396e2691fa6722fb16925e245c2744280ebN

General

Target
f2293c63cafefb53048a347ba6f2b396e2691fa6722fb16925e245c2744280ebN
Size 547KB
Sample241111-mrdegsydmd
SHA256 f2293c63cafefb53048a347ba6f2b396e2691fa6722fb16925e245c2744280eb
MD5 080d340173cad26863055d432f230a00
SHA1 0a26ba23e1f6bec067c72307ed9693cd88a3bdb4
SHA512 cbfd3aa417a77cd170a575b79022fc8f7c6409f42804783a10d209be2cd1b1cf44852153b0e9e8259effedaa36ec22fbe1efdfdaac1116473948e6f949304428
SSDEEP 6144:ow+yBAWpGb8faYy+cJB3uapBImauFe3poxaejKkELno4qiTkMhWEg9/S5TXVBUw6:L+GAW1faYyFBhFe2ODo2kUg9/Kst
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f2293c63cafefb53048a347ba6f2b396e2691fa6722fb16925e245c2744280ebN

File Explorer

f2293c63cafefb53048a347ba6f2b396e2691fa6722fb16925e245c2744280ebN

.exe 547KB

f2293c63cafefb53048a347ba6f2b396e2691fa6722fb16925e245c2744280ebN

IMPHASH 16e2f5555f1a0fa40e68c1b98dd19ce4
SHA256 f2293c63cafefb53048a347ba6f2b396e2691fa6722fb16925e245c2744280eb
MD5 080d340173cad26863055d432f230a00
SHA1 0a26ba23e1f6bec067c72307ed9693cd88a3bdb4
SHA512 cbfd3aa417a77cd170a575b79022fc8f7c6409f42804783a10d209be2cd1b1cf44852153b0e9e8259effedaa36ec22fbe1efdfdaac1116473948e6f949304428
SSDEEP 6144:ow+yBAWpGb8faYy+cJB3uapBImauFe3poxaejKkELno4qiTkMhWEg9/S5TXVBUw6:L+GAW1faYyFBhFe2ODo2kUg9/Kst
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

24716

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\govu.pdb

kernel32

GetComputerNameW GetModuleHandleW GetNumberFormatA ReadConsoleW EnumTimeFormatsA EnumTimeFormatsW EnumResourceTypesA SetProcessPriorityBoost ActivateActCtx FindResourceExA GetCalendarInfoA GetSystemWindowsDirectoryA HeapCreate EnumSystemCodePagesA FindNextVolumeW GetConsoleAliasW Beep GetModuleFileNameW GetConsoleFontSize CreateActCtxA GetACP lstrlenW GlobalUnlock EnumSystemLocalesA GetConsoleAliasesW GetCPInfoExW GetLastError GetLongPathNameW GetProcAddress VirtualAlloc AddConsoleAliasW IsBadHugeWritePtr BeginUpdateResourceW WriteProfileSectionA RemoveDirectoryA SetComputerNameA LoadLibraryA WriteConsoleA InterlockedExchangeAdd LocalAlloc WriteProfileSectionW AddAtomA FindAtomA GetDefaultCommConfigA SetConsoleCursorInfo GetConsoleTitleW GetShortPathNameW GetDiskFreeSpaceExW GetWindowsDirectoryW DeleteTimerQueueTimer GetTempPathA EnumCalendarInfoExA SuspendThread CreateFileA CloseHandle WriteConsoleW GetConsoleOutputCP SetStdHandle FlushFileBuffers GetModuleHandleA WaitForSingleObject QueryDosDeviceA lstrlenA GetCurrentActCtx ReadConsoleA HeapSize InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection MultiByteToWideChar GetCommandLineA GetStartupInfoA RaiseException RtlUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter HeapFree TerminateProcess GetCurrentProcess IsDebuggerPresent HeapAlloc GetCPInfo GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId SetHandleCount GetStdHandle GetFileType ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetLocaleInfoA GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW SetFilePointer GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount

user32

ToAsciiEx ChangeMenuA CharLowerBuffW SetParent CreateAcceleratorTableW GetWindowLongA GetSysColorBrush GetKeyNameTextW GetMenuInfo

gdi32

GetColorAdjustment GetCharABCWidthsW GetCharWidthA

advapi32

BackupEventLogW

Sharing

General

Malware Config

Signatures

File Explorer

f2293c63cafefb53048a347ba6f2b396e2691fa6722fb16925e245c2744280ebN

kernel32

user32

gdi32

advapi32

generic