a0ff13d27d6d83e8d98c922cefac1248ff6e2ba822abb639aa7d7b14350d69a3N[.]exe

General

Target
a0ff13d27d6d83e8d98c922cefac1248ff6e2ba822abb639aa7d7b14350d69a3N.exe
Size 348KB
Sample241113-vkrmjavpay
SHA256 a0ff13d27d6d83e8d98c922cefac1248ff6e2ba822abb639aa7d7b14350d69a3
MD5 e2822fbc7a669c5478654c8d24611db0
SHA1 cdfd025f534575ca86146ac604d7e95dd1773308
SHA512 6eb11ba0ae3414742abdebeee332169e45b8229834da127c31a1c4e8ffe1a3985a5acf83a60a08442c1b1c94618f11091b7a89d85348fe6242d7e8d3be1df15f
SSDEEP 6144:TLAEIGjmJksuargmd2YtQmeZRhuFN7CHbi+T0inDGgdeMQ4oNHIeT:TkfeK1gmRQdZRhueHx0iDZe7JK2
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a0ff13d27d6d83e8d98c922cefac1248ff6e2ba822abb639aa7d7b14350d69a3N.exe

File Explorer

a0ff13d27d6d83e8d98c922cefac1248ff6e2ba822abb639aa7d7b14350d69a3N.exe

.exe 348KB

a0ff13d27d6d83e8d98c922cefac1248ff6e2ba822abb639aa7d7b14350d69a3N.exe

IMPHASH 557304204f793bd25ef0de03ca7f808e
SHA256 a0ff13d27d6d83e8d98c922cefac1248ff6e2ba822abb639aa7d7b14350d69a3
MD5 e2822fbc7a669c5478654c8d24611db0
SHA1 cdfd025f534575ca86146ac604d7e95dd1773308
SHA512 6eb11ba0ae3414742abdebeee332169e45b8229834da127c31a1c4e8ffe1a3985a5acf83a60a08442c1b1c94618f11091b7a89d85348fe6242d7e8d3be1df15f
SSDEEP 6144:TLAEIGjmJksuargmd2YtQmeZRhuFN7CHbi+T0inDGgdeMQ4oNHIeT:TkfeK1gmRQdZRhueHx0iDZe7JK2
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

19039

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\mutani\fod\fasip\suzofumi\fopejud100_beyuke33\puzizet.pdb

kernel32

ReadConsoleA ScrollConsoleScreenBufferW SetHandleInformation WaitForSingleObject BackupSeek GetProcessPriorityBoost GetModuleHandleW EnumCalendarInfoExW GetConsoleAliasesLengthA GetWindowsDirectoryA EnumTimeFormatsW TzSpecificLocalTimeToSystemTime FindResourceExA GetCalendarInfoA IsBadCodePtr FindNextVolumeW GetConsoleAliasW lstrlenW GlobalUnlock GetCPInfoExW GetLastError SetLastError GetProcAddress VirtualAlloc BeginUpdateResourceW WriteProfileSectionA GetConsoleDisplayMode LoadLibraryA WriteConsoleA InterlockedExchangeAdd LocalAlloc WritePrivateProfileStringA GetNumberFormatW AddAtomW RemoveDirectoryW GetDiskFreeSpaceA EnumResourceTypesW GetOEMCP GetDefaultCommConfigA GetConsoleTitleW VirtualProtect GetShortPathNameW TlsAlloc FileTimeToLocalFileTime DeleteTimerQueueTimer AddConsoleAliasA DebugBreak GetModuleHandleA lstrlenA EnumResourceNamesW SetThreadPriorityBoost GetComputerNameA InitializeCriticalSectionAndSpinCount MultiByteToWideChar GetCommandLineA GetStartupInfoA HeapAlloc HeapFree GetCPInfo InterlockedIncrement InterlockedDecrement GetACP IsValidCodePage TlsGetValue TlsSetValue TlsFree GetCurrentThreadId Sleep HeapSize ExitProcess SetUnhandledExceptionFilter WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RtlUnwind RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent LeaveCriticalSection EnterCriticalSection HeapReAlloc LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA

user32

CharLowerBuffW GetWindowLongW GetSysColorBrush SetCaretPos

gdi32

GetColorAdjustment GetCharABCWidthsW GetCharWidthW

ole32

OleQueryLinkFromData

Sharing