ec798c77128e45e2e35a0d276a06c50cd2f4717da4d24e37de8a0b921daa3c21[.]exe

General

Target
ec798c77128e45e2e35a0d276a06c50cd2f4717da4d24e37de8a0b921daa3c21.exe
Size 512KB
Sample241122-j7smkatkcm
SHA256 ec798c77128e45e2e35a0d276a06c50cd2f4717da4d24e37de8a0b921daa3c21
MD5 2b2f93cf8f133618769ce5ea5cb86c35
SHA1 e8e280789b0b2ca85287cce643245761b82a8e12
SHA512 c4de617dca2e3f840e9c52cf0be11664f844a79d1dfde38d10fbf28dfdc85ae5f0940cfae6ac5826010b860c1364a364181ea5cd07012eb43970f8590be88da0
SSDEEP 12288:gklWgckRR3v7ORkrDnOOgVe30Gg3LaLaHQktxDd:gmWDkvf7TnAxaL+9t3
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ec798c77128e45e2e35a0d276a06c50cd2f4717da4d24e37de8a0b921daa3c21.exe

File Explorer

ec798c77128e45e2e35a0d276a06c50cd2f4717da4d24e37de8a0b921daa3c21.exe

.exe 512KB

ec798c77128e45e2e35a0d276a06c50cd2f4717da4d24e37de8a0b921daa3c21.exe

IMPHASH 96eae633c3835f4142e00d18fc3a156d
SHA256 ec798c77128e45e2e35a0d276a06c50cd2f4717da4d24e37de8a0b921daa3c21
MD5 2b2f93cf8f133618769ce5ea5cb86c35
SHA1 e8e280789b0b2ca85287cce643245761b82a8e12
SHA512 c4de617dca2e3f840e9c52cf0be11664f844a79d1dfde38d10fbf28dfdc85ae5f0940cfae6ac5826010b860c1364a364181ea5cd07012eb43970f8590be88da0
SSDEEP 12288:gklWgckRR3v7ORkrDnOOgVe30Gg3LaLaHQktxDd:gmWDkvf7TnAxaL+9t3
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

8754

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\zoyotidaxod\kinukoleviroca\yunoheka\guceb\na.pdb

kernel32

GetCurrentProcess SetEnvironmentVariableW GetEnvironmentStringsW SetEvent GetTickCount ReadConsoleW FindActCtxSectionStringA GlobalAlloc Sleep InitAtomTable FindNextVolumeW WriteConsoleW GetMailslotInfo CreateActCtxA SetConsoleTitleA SetTapePosition Module32First GetLastError GetProcAddress VirtualAlloc GetAtomNameA LoadLibraryA BeginUpdateResourceA GetProcessShutdownParameters LoadLibraryExA GetProcessAffinityMask GetCPInfoExA ReleaseMutex EndUpdateResourceA GetVersionExA FindNextVolumeA lstrcpyW LCMapStringW GetModuleFileNameW HeapReAlloc EncodePointer DecodePointer GetModuleHandleW ExitProcess GetCommandLineW HeapSetInformation GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapAlloc ReadFile EnterCriticalSection LeaveCriticalSection HeapFree IsProcessorFeaturePresent SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection SetFilePointer GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle LoadLibraryW WriteFile FreeEnvironmentStringsW HeapCreate QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime WideCharToMultiByte GetConsoleCP GetConsoleMode MultiByteToWideChar RtlUnwind RaiseException SetStdHandle FlushFileBuffers GetStringTypeW HeapSize CreateFileW

gdi32

GetBitmapBits

Sharing