1cee0c30f7d1bd34c056a547104d0235fd33261bd6ff163fcc6c1ab461998acd

General

Target
1cee0c30f7d1bd34c056a547104d0235fd33261bd6ff163fcc6c1ab461998acd
Size 381KB
Sample241113-y5qgraydpg
SHA256 1cee0c30f7d1bd34c056a547104d0235fd33261bd6ff163fcc6c1ab461998acd
MD5 579bdbcc874bae77f3522f12338bb02a
SHA1 3267c595d7efe0d933f8f4581431023a2bf81514
SHA512 424f5dc16975169107994d349fe37bb4942c60cbefcd9233180f412eeefd3c4a5569bcb526a0dd9ba2b84422568b7a22930673d273cf0fe5623f75ca19cf026c
SSDEEP 6144:ABJk9av85lgrciUnEOqGRPW8ETxPLsYp:AXkEvEgrciUEOq0PEVL9p
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1cee0c30f7d1bd34c056a547104d0235fd33261bd6ff163fcc6c1ab461998acd

File Explorer

1cee0c30f7d1bd34c056a547104d0235fd33261bd6ff163fcc6c1ab461998acd

.exe 381KB

1cee0c30f7d1bd34c056a547104d0235fd33261bd6ff163fcc6c1ab461998acd

IMPHASH c2613217b278bbf906136c8e0c29af3a
SHA256 1cee0c30f7d1bd34c056a547104d0235fd33261bd6ff163fcc6c1ab461998acd
MD5 579bdbcc874bae77f3522f12338bb02a
SHA1 3267c595d7efe0d933f8f4581431023a2bf81514
SHA512 424f5dc16975169107994d349fe37bb4942c60cbefcd9233180f412eeefd3c4a5569bcb526a0dd9ba2b84422568b7a22930673d273cf0fe5623f75ca19cf026c
SSDEEP 6144:ABJk9av85lgrciUnEOqGRPW8ETxPLsYp:AXkEvEgrciUEOq0PEVL9p
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

19237

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\detipodoso65\lefa-bicahil\paxohocuj_zaxoleh\yob\ticoz.pdb

kernel32

SetMailslotInfo ScrollConsoleScreenBufferW AddConsoleAliasW FindCloseChangeNotification UnlockFile GetModuleHandleW GetConsoleTitleA GetWindowsDirectoryA EnumTimeFormatsA GetDateFormatA EnumResourceTypesA SetHandleCount TlsSetValue FindResourceExA GlobalAlloc LoadLibraryW SetCommConfig GetCalendarInfoW GetStringTypeExW FindNextVolumeW GetFileAttributesW EnumSystemLocalesA GlobalUnfix GetProfileIntA SetThreadLocale GetCPInfoExW SetLastError GetProcAddress VirtualAlloc HeapSize BeginUpdateResourceW WriteProfileSectionA CreateMemoryResourceNotification SetThreadPriorityBoost LoadLibraryA WriteConsoleA InterlockedExchangeAdd WaitForMultipleObjects CreateMailslotA VirtualProtect OpenEventW GetWindowsDirectoryW AddConsoleAliasA DebugBreak EnumCalendarInfoExA GetModuleHandleA VerSetConditionMask GetConsoleAliasesLengthW CreateFileA MultiByteToWideChar Sleep ExitProcess GetCommandLineA GetStartupInfoA HeapAlloc GetLastError HeapFree GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree GetCurrentThreadId WriteFile GetStdHandle GetModuleFileNameA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW GetFileType HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc RaiseException LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA RtlUnwind

user32

GetWindowLongW RegisterClassW SetCaretPos CharLowerBuffW

gdi32

GetCharWidthW SetColorAdjustment GetCharABCWidthsI

Sharing

General

Malware Config

Signatures

File Explorer

1cee0c30f7d1bd34c056a547104d0235fd33261bd6ff163fcc6c1ab461998acd

kernel32

user32

gdi32

generic