5064aef89b730a42d85d3ac7dc87a78a569cc01543cd1c6aca730c68f4b4ae2a

General

Target
5064aef89b730a42d85d3ac7dc87a78a569cc01543cd1c6aca730c68f4b4ae2a
Size 389KB
Sample241121-x2x7razlam
SHA256 5064aef89b730a42d85d3ac7dc87a78a569cc01543cd1c6aca730c68f4b4ae2a
MD5 abe088e1e401df91c6729d1e4e3d44da
SHA1 b0fb9e1bd6f3761b2bd639ffe22625d394d93423
SHA512 a2285691fab964ce40d62f48f75a57943fd83aa6ac74ee76b64f7981302cc74f565cc37a5f88474bc6981e32b031f038d30fff4ccca050f878beb59dde976f3e
SSDEEP 12288:qEdSgZ7OTgrxuwUkpH6HmCagSdgC9eWD9RqXn/:qgFjRUHHagC9PDK
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5064aef89b730a42d85d3ac7dc87a78a569cc01543cd1c6aca730c68f4b4ae2a

File Explorer

5064aef89b730a42d85d3ac7dc87a78a569cc01543cd1c6aca730c68f4b4ae2a

.exe 389KB

5064aef89b730a42d85d3ac7dc87a78a569cc01543cd1c6aca730c68f4b4ae2a

IMPHASH 4af4742906d30c7889c195169379a2f9
SHA256 5064aef89b730a42d85d3ac7dc87a78a569cc01543cd1c6aca730c68f4b4ae2a
MD5 abe088e1e401df91c6729d1e4e3d44da
SHA1 b0fb9e1bd6f3761b2bd639ffe22625d394d93423
SHA512 a2285691fab964ce40d62f48f75a57943fd83aa6ac74ee76b64f7981302cc74f565cc37a5f88474bc6981e32b031f038d30fff4ccca050f878beb59dde976f3e
SSDEEP 12288:qEdSgZ7OTgrxuwUkpH6HmCagSdgC9eWD9RqXn/:qgFjRUHHagC9PDK
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

184128

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\cigikifajuwome\luyukoxikiz63-gilexu.pdb

kernel32

SearchPathW GetConsoleAliasesLengthW GetCPInfo InterlockedDecrement AddConsoleAliasW FreeEnvironmentStringsA GetModuleHandleW GetTickCount SetFileTime CreateActCtxW GlobalAlloc SetFileShortNameW GetConsoleMode TerminateThread IsBadWritePtr GetEnvironmentVariableA CompareStringW ExitThread lstrlenW VerifyVersionInfoW GetStartupInfoA FindFirstFileExA GetCurrentDirectoryW GetLongPathNameW SetLastError GetProcAddress CopyFileA LockFileEx OpenWaitableTimerA ProcessIdToSessionId MoveFileA SetCurrentDirectoryW WriteProfileSectionW GlobalGetAtomNameW GetModuleFileNameA WriteProfileStringA GetModuleHandleA GetProcessShutdownParameters FreeEnvironmentStringsW ScrollConsoleScreenBufferA GetVersionExA TlsAlloc GetWindowsDirectoryW DeleteFileW LocalFileTimeToFileTime InterlockedIncrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess GetCurrentProcess IsDebuggerPresent GetModuleFileNameW GetCommandLineA HeapValidate IsBadReadPtr RaiseException RtlUnwind WideCharToMultiByte MultiByteToWideChar LCMapStringA GetLastError LCMapStringW ExitProcess WriteFile GetStdHandle TlsGetValue TlsSetValue GetCurrentThreadId TlsFree DebugBreak OutputDebugStringA WriteConsoleW GetFileType OutputDebugStringW LoadLibraryW SetHandleCount GetACP GetOEMCP IsValidCodePage QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStrings GetEnvironmentStringsW HeapDestroy HeapCreate HeapFree VirtualFree FlushFileBuffers GetConsoleCP HeapAlloc HeapSize HeapReAlloc VirtualAlloc GetStringTypeA GetStringTypeW GetLocaleInfoA IsValidLocale EnumSystemLocalesA GetUserDefaultLCID LoadLibraryA InitializeCriticalSectionAndSpinCount SetFilePointer SetStdHandle WriteConsoleA GetConsoleOutputCP GetLocaleInfoW CloseHandle CreateFileA

winhttp

WinHttpReadData

Sharing

General

Malware Config

Signatures

File Explorer

5064aef89b730a42d85d3ac7dc87a78a569cc01543cd1c6aca730c68f4b4ae2a

kernel32

winhttp

generic