1c0c662146236eedcaa468a205bf1969795140213e401d28e98044b3dc431cebN

General

Target
1c0c662146236eedcaa468a205bf1969795140213e401d28e98044b3dc431cebN
Size 311KB
Sample241113-zy3deayhpc
SHA256 1c0c662146236eedcaa468a205bf1969795140213e401d28e98044b3dc431ceb
MD5 15db92ba13755568330c2f755239fd50
SHA1 50af4d6b3e184200c99083948d1949b1efae724f
SHA512 d713f4076461f9a094468d27782bd9011aaecc6040359266ee1579fa5e8f606cc845f9aa4e91b534f2e8bff9b67ec6d53a7d702a40fde93cc8f6fa74a21dd6fa
SSDEEP 6144:9kgAYnCO/SuhHtNfhFwErILIQv91GW/6vS4pHT:9hCOX7ZHe91GW/6bz
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c0c662146236eedcaa468a205bf1969795140213e401d28e98044b3dc431cebN

File Explorer

1c0c662146236eedcaa468a205bf1969795140213e401d28e98044b3dc431cebN

.exe 311KB

1c0c662146236eedcaa468a205bf1969795140213e401d28e98044b3dc431cebN

IMPHASH 106eb5dbb7fdc2adeef530fb10849030
SHA256 1c0c662146236eedcaa468a205bf1969795140213e401d28e98044b3dc431ceb
MD5 15db92ba13755568330c2f755239fd50
SHA1 50af4d6b3e184200c99083948d1949b1efae724f
SHA512 d713f4076461f9a094468d27782bd9011aaecc6040359266ee1579fa5e8f606cc845f9aa4e91b534f2e8bff9b67ec6d53a7d702a40fde93cc8f6fa74a21dd6fa
SSDEEP 6144:9kgAYnCO/SuhHtNfhFwErILIQv91GW/6vS4pHT:9hCOX7ZHe91GW/6bz
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

24823

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\vapah79\nedatejewa.pdb

kernel32

GetCommState ReadConsoleA WaitNamedPipeA ScrollConsoleScreenBufferW SetFirmwareEnvironmentVariableA CreateJobObjectW InterlockedCompareExchange FreeEnvironmentStringsA GetModuleHandleW EnumCalendarInfoExW GetConsoleAliasesLengthA TlsSetValue FindResourceExA LoadLibraryW GetConsoleMode GetVersionExW GetConsoleAliasW HeapValidate SetConsoleCursorPosition GetFileAttributesW GetMailslotInfo GetStringTypeExA GetCPInfoExW VerSetConditionMask SetLastError BackupRead GetProcAddress VirtualAlloc BeginUpdateResourceW RemoveDirectoryA SetStdHandle LocalAlloc WritePrivateProfileStringA WriteProfileSectionW AddAtomA FoldStringW EnumResourceTypesW GetModuleHandleA OpenEventW QueryPerformanceFrequency GetShortPathNameW GetWindowsDirectoryW AddConsoleAliasA GetConsoleProcessList DebugBreak CommConfigDialogW DeleteFileA InterlockedIncrement DeleteVolumeMountPointA GetProfileIntW MoveFileExA InterlockedFlushSList GetSystemDefaultLangID InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree MultiByteToWideChar GetCommandLineA GetStartupInfoA RtlUnwind RaiseException ExitProcess WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent HeapAlloc HeapCreate VirtualFree HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsFree GetCurrentThreadId SetHandleCount GetFileType SetFilePointer GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetLocaleInfoA GetStringTypeA GetStringTypeW LoadLibraryA InitializeCriticalSectionAndSpinCount GetConsoleCP LCMapStringA LCMapStringW WriteConsoleA GetConsoleOutputCP WriteConsoleW FlushFileBuffers CreateFileA CloseHandle

gdi32

GetCharacterPlacementW SelectPalette GetTextExtentExPointA GetCharWidthI

advapi32

MapGenericMask

Sharing

General

Malware Config

Signatures

File Explorer

1c0c662146236eedcaa468a205bf1969795140213e401d28e98044b3dc431cebN

kernel32

gdi32

advapi32

generic