528f28e4bd0471be4a1cbcea91089ffb3a106e25[.]exe

General

Target
528f28e4bd0471be4a1cbcea91089ffb3a106e25.exe
Size 415KB
Sample241111-vcvzzssbpg
SHA256 b904a34121c8a3f0d8fac98ce0fe87cadd574d50d8d26696ddc22531544e82ef
MD5 25565a205e1d3027bd0fe8ecbad2d16a
SHA1 528f28e4bd0471be4a1cbcea91089ffb3a106e25
SHA512 e0142b6aee95541cb205829d5350488773b0de2428c51229058f14e34354881f8de98eb14276f1c6f45c7167c82a87f2be659ae902bc0485f83207c77997f009
SSDEEP 6144:clTbcBgnfPGIgAce1xDFrIWjuTVCBK+ww6xXwvRt6MdNU1:yTASfPGC9DrIPVQ3wwOXwvvdN
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
528f28e4bd0471be4a1cbcea91089ffb3a106e25.exe

File Explorer

528f28e4bd0471be4a1cbcea91089ffb3a106e25.exe

.exe 415KB

528f28e4bd0471be4a1cbcea91089ffb3a106e25.exe

IMPHASH 0301c97692eb66d40eb60ddb80bc0b65
SHA256 b904a34121c8a3f0d8fac98ce0fe87cadd574d50d8d26696ddc22531544e82ef
MD5 25565a205e1d3027bd0fe8ecbad2d16a
SHA1 528f28e4bd0471be4a1cbcea91089ffb3a106e25
SHA512 e0142b6aee95541cb205829d5350488773b0de2428c51229058f14e34354881f8de98eb14276f1c6f45c7167c82a87f2be659ae902bc0485f83207c77997f009
SSDEEP 6144:clTbcBgnfPGIgAce1xDFrIWjuTVCBK+ww6xXwvRt6MdNU1:yTASfPGC9DrIPVQ3wwOXwvvdN
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

19133

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\jumevasihazo\lufonimeyomam\pece.pdb

kernel32

WaitForSingleObject SetComputerNameW AddConsoleAliasW GetComputerNameW _lclose GetModuleHandleW EnumCalendarInfoExW GetConsoleAliasesA GetNumberFormatA GetConsoleTitleA ReadConsoleW GetWindowsDirectoryA GetConsoleAliasExesW EnumTimeFormatsW CreateActCtxW SetProcessPriorityBoost FindResourceExA GetCalendarInfoA GetSystemWindowsDirectoryA FindNextVolumeW Beep WriteConsoleW GetModuleFileNameW GetConsoleFontSize lstrlenW GlobalUnlock GetShortPathNameA GetCPInfoExW GetLastError SetLastError GetProcAddress QueryDosDeviceA HeapSize IsBadHugeWritePtr BeginUpdateResourceW WriteProfileSectionA RemoveDirectoryA EnumSystemCodePagesW _hwrite SetThreadPriorityBoost LoadLibraryA InterlockedExchangeAdd LocalAlloc WritePrivateProfileStringA AddAtomW EnumResourceTypesW GetOEMCP GetDefaultCommConfigA SetConsoleCursorInfo GetConsoleTitleW VirtualProtect GetDiskFreeSpaceExW FindAtomW WriteFileEx FileTimeToLocalFileTime DeleteTimerQueueTimer SuspendThread GetModuleHandleA GetConsoleAliasA FindResourceA lstrlenA VirtualAlloc EnumResourceNamesW HeapAlloc MultiByteToWideChar GetCommandLineA GetStartupInfoA HeapFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualFree HeapReAlloc HeapCreate Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetCPInfo InterlockedIncrement InterlockedDecrement GetACP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId SetUnhandledExceptionFilter FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA

user32

GetWindowLongW GetSysColorBrush SetCaretPos CharLowerBuffW

gdi32

CreateHalftonePalette GetCharABCWidthsW GetCharWidthW

advapi32

CloseEventLog

Sharing