45dd17c0bdebfffa51f82ad9429c99580e730a0db8e60ea0f3de2ef3fea8c38c

General

Target
45dd17c0bdebfffa51f82ad9429c99580e730a0db8e60ea0f3de2ef3fea8c38c
Size 345KB
Sample241112-1jffrssbkr
SHA256 45dd17c0bdebfffa51f82ad9429c99580e730a0db8e60ea0f3de2ef3fea8c38c
MD5 b5d29a4ba533aabd0d2ca8c1dd3aa0c7
SHA1 a4ffd3c0908da6e5ea1ab0ec866a21b00c474efd
SHA512 411ddae89ee00aededfd6d46ce07ac152926071b8523e0ba936e16469fab0179ad8760c06df00bbcf3fb3bcf7f262fe325f0c1b2b380a09e526f1cc7676e2e93
SSDEEP 3072:x1FqmW/I9n3ohoIPYhAwUrGmowVY9gPaD/S3i4ZdD57oMwX5Rr7DT+uilh0+k:TiAuqPhAwUCmow0dD6y4ZdDKMkPcG+
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45dd17c0bdebfffa51f82ad9429c99580e730a0db8e60ea0f3de2ef3fea8c38c

File Explorer

45dd17c0bdebfffa51f82ad9429c99580e730a0db8e60ea0f3de2ef3fea8c38c

.exe 345KB

45dd17c0bdebfffa51f82ad9429c99580e730a0db8e60ea0f3de2ef3fea8c38c

IMPHASH d62085a6a96f09592c2a38f2d537a48e
SHA256 45dd17c0bdebfffa51f82ad9429c99580e730a0db8e60ea0f3de2ef3fea8c38c
MD5 b5d29a4ba533aabd0d2ca8c1dd3aa0c7
SHA1 a4ffd3c0908da6e5ea1ab0ec866a21b00c474efd
SHA512 411ddae89ee00aededfd6d46ce07ac152926071b8523e0ba936e16469fab0179ad8760c06df00bbcf3fb3bcf7f262fe325f0c1b2b380a09e526f1cc7676e2e93
SSDEEP 3072:x1FqmW/I9n3ohoIPYhAwUrGmowVY9gPaD/S3i4ZdD57oMwX5Rr7DT+uilh0+k:TiAuqPhAwUCmow0dD6y4ZdDKMkPcG+
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

17284

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\dereyutavu\biy\makanerol\lup-96\yikas bovubeyax.pdb

kernel32

GetConsoleAliasA WaitForSingleObject SetComputerNameW AddConsoleAliasW GetComputerNameW GetModuleHandleW EnumCalendarInfoExW GetConsoleAliasesA GetNumberFormatA GetConsoleTitleA ReadConsoleW GetWindowsDirectoryA GetConsoleAliasExesW EnumTimeFormatsW CreateActCtxW SetProcessPriorityBoost FindResourceExA GetCalendarInfoW GetSystemWindowsDirectoryA FindNextVolumeW Beep WriteConsoleW GetConsoleFontSize lstrlenW GlobalUnlock GetShortPathNameA GetCPInfoExW SetLastError GetProcAddress GetLongPathNameA VirtualAlloc HeapSize ReadConsoleA BeginUpdateResourceW EnumSystemCodePagesW SetThreadPriorityBoost LoadLibraryA InterlockedExchangeAdd LocalAlloc AddAtomW RemoveDirectoryW QueryDosDeviceW WriteProfileSectionW FindAtomA EnumResourceTypesW GetModuleFileNameA GetOEMCP SetConsoleCursorInfo GetConsoleTitleW WriteConsoleOutputAttribute GetDiskFreeSpaceExW WriteFileEx DeleteTimerQueueTimer SuspendThread GetModuleHandleA GetLocaleInfoA SystemTimeToFileTime lstrlenA GetDefaultCommConfigW IsBadHugeWritePtr FindResourceA MultiByteToWideChar GetCommandLineA GetStartupInfoA HeapAlloc GetLastError HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement Sleep ExitProcess GetCPInfo GetACP IsValidCodePage SetUnhandledExceptionFilter WriteFile GetStdHandle FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent LeaveCriticalSection EnterCriticalSection HeapReAlloc InitializeCriticalSectionAndSpinCount LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW

user32

ToAsciiEx ChangeMenuA CharLowerBuffW CreateAcceleratorTableW GetWindowLongW GetSysColorBrush SetCaretPos ModifyMenuA IsCharAlphaNumericA GetKeyNameTextA

gdi32

CreateHalftonePalette GetCharABCWidthsW GetCharWidthW

advapi32

BackupEventLogA

Sharing

General

Malware Config

Signatures

File Explorer

45dd17c0bdebfffa51f82ad9429c99580e730a0db8e60ea0f3de2ef3fea8c38c

kernel32

user32

gdi32

advapi32

generic