ad42ae25b5ae192a64ff550c53b5d2db38b3cbf0b77d34af7dbe6fd0f554aadc

General

Target
ad42ae25b5ae192a64ff550c53b5d2db38b3cbf0b77d34af7dbe6fd0f554aadc
Size 788KB
Sample241121-xvsnpazjdp
SHA256 ad42ae25b5ae192a64ff550c53b5d2db38b3cbf0b77d34af7dbe6fd0f554aadc
MD5 d12fac240f848ffc20ab138277643ffb
SHA1 0bbf2d7bae64ec348ec6c7060e185126abd59d63
SHA512 81f261deffc263258828a995a4445a37c521b67eed67ebc19314e5062c56b038e3f0a03806323a3f7638ac6be0858a06b75c15767ff4224a478fd9ef6d89f538
SSDEEP 24576:Sh2Q81BHBADHUVYNV8Wvq0XuH8TNe1fUb:ShUhiHUVU8WS0XDNe9
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad42ae25b5ae192a64ff550c53b5d2db38b3cbf0b77d34af7dbe6fd0f554aadc

File Explorer

ad42ae25b5ae192a64ff550c53b5d2db38b3cbf0b77d34af7dbe6fd0f554aadc

.exe 788KB

ad42ae25b5ae192a64ff550c53b5d2db38b3cbf0b77d34af7dbe6fd0f554aadc

IMPHASH 966cf9f466ae2df0bc45d5c180b65617
SHA256 ad42ae25b5ae192a64ff550c53b5d2db38b3cbf0b77d34af7dbe6fd0f554aadc
MD5 d12fac240f848ffc20ab138277643ffb
SHA1 0bbf2d7bae64ec348ec6c7060e185126abd59d63
SHA512 81f261deffc263258828a995a4445a37c521b67eed67ebc19314e5062c56b038e3f0a03806323a3f7638ac6be0858a06b75c15767ff4224a478fd9ef6d89f538
SSDEEP 24576:Sh2Q81BHBADHUVYNV8Wvq0XuH8TNe1fUb:ShUhiHUVU8WS0XDNe9
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

12459

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\lacigo16\yirejawofisuc.pdb

kernel32

GetConsoleAliasesLengthW TlsGetValue GetConsoleAliasExesLengthA SystemTimeToTzSpecificLocalTime GlobalAddAtomA EndUpdateResourceW GetCurrentProcess CreateJobObjectW SetConsoleScreenBufferSize SetComputerNameW SleepEx GetModuleHandleW GetTickCount GetWindowsDirectoryA GetDateFormatA EnumTimeFormatsW GlobalAlloc GlobalFindAtomA LoadLibraryW SizeofResource FormatMessageW GetVersionExW CreateFileW LCMapStringA GetConsoleAliasesW GetLastError GetNativeSystemInfo BackupRead ReadConsoleOutputCharacterA GetProcAddress VirtualAlloc BeginUpdateResourceW EnumDateFormatsExA HeapUnlock SetComputerNameA InterlockedExchangeAdd CreateFileMappingA DeleteTimerQueue SetThreadIdealProcessor FoldStringW FoldStringA FindFirstVolumeMountPointA FindFirstChangeNotificationA GetCurrentThreadId OpenSemaphoreW SetFileShortNameA TerminateJobObject GetWindowsDirectoryW lstrcpyA GetComputerNameA SetLastError GetFullPathNameW UnhandledExceptionFilter SetUnhandledExceptionFilter GetCommandLineA GetStartupInfoA Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection TlsAlloc TlsSetValue TlsFree InterlockedIncrement InterlockedDecrement HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection TerminateProcess IsDebuggerPresent LoadLibraryA InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage HeapAlloc HeapReAlloc RtlUnwind HeapSize GetLocaleInfoA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW

user32

DdeQueryStringW

gdi32

CreateCompatibleBitmap SetDeviceGammaRamp

Sharing

General

Malware Config

Signatures

File Explorer

ad42ae25b5ae192a64ff550c53b5d2db38b3cbf0b77d34af7dbe6fd0f554aadc

kernel32

user32

gdi32

generic