91dcc81e8257de71a0d162f5b02654ce2895518a08112bb8c0ef764d575f1b99[.]exe

General

Target
91dcc81e8257de71a0d162f5b02654ce2895518a08112bb8c0ef764d575f1b99.exe
Size 791KB
Sample260809-m2pkhawfka
SHA256 91dcc81e8257de71a0d162f5b02654ce2895518a08112bb8c0ef764d575f1b99
MD5 29b22221fa28a43afd45dc065f20ae45
SHA1 9ce6c44050d1e27e5389fa446662364668fb7143
SHA512 f5dca9ab72e3dd4b8f02450191bccd23d225c952fe6e378b64cac9b5f7b1d616c3e94456ed5622bd61ab70ded9beb4974ef14bdcbb95618b7160922902784cbb
SSDEEP 12288:HihECdP0PJ1p1zcafEuQn8LK0ZHhJSSy7SVRDwx1afWmoa81x4YMhvoqa:CPA38Fn78Hzy7ekx1afc1uyF
TLSH
T139050210BB80D035E9B712F049BB93ACB52E76605B78A0CB66D51BEB52347D4ED3131B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
91dcc81e8257de71a0d162f5b02654ce2895518a08112bb8c0ef764d575f1b99.exe

File Explorer

91dcc81e8257de71a0d162f5b02654ce2895518a08112bb8c0ef764d575f1b99.exe

.exe 791KB

91dcc81e8257de71a0d162f5b02654ce2895518a08112bb8c0ef764d575f1b99.exe

IMPHASH 27d8a7471ee53dd07acef039b03728e9
SHA256 91dcc81e8257de71a0d162f5b02654ce2895518a08112bb8c0ef764d575f1b99
MD5 29b22221fa28a43afd45dc065f20ae45
SHA1 9ce6c44050d1e27e5389fa446662364668fb7143
SHA512 f5dca9ab72e3dd4b8f02450191bccd23d225c952fe6e378b64cac9b5f7b1d616c3e94456ed5622bd61ab70ded9beb4974ef14bdcbb95618b7160922902784cbb
SSDEEP 12288:HihECdP0PJ1p1zcafEuQn8LK0ZHhJSSy7SVRDwx1afWmoa81x4YMhvoqa:CPA38Fn78Hzy7ekx1afc1uyF
TLSH
T139050210BB80D035E9B712F049BB93ACB52E76605B78A0CB66D51BEB52347D4ED3131B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

970752

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\dixepiwop\kiwufulo-pewuz\nuvu64\wupeliz.pdb

kernel32

LoadLibraryA CreateMutexW SetLocaleInfoW FindNextVolumeW GetNamedPipeHandleStateA LocalFileTimeToFileTime EnumResourceTypesW EnumResourceNamesW FillConsoleOutputCharacterA CreateTimerQueueTimer TerminateProcess SetEvent FindNextFileA GetCompressedFileSizeA CopyFileExW BuildCommDCBW VerifyVersionInfoA FreeResource SetLastError GetVersionExA ReadConsoleOutputCharacterA SetDefaultCommConfigW VerLanguageNameW GetCommConfig WritePrivateProfileStructW LocalFree CreateTimerQueue FindNextVolumeMountPointA ResetWriteWatch WriteConsoleInputA LoadResource AddAtomW InitAtomTable GetThreadPriority CallNamedPipeA GetDriveTypeW BuildCommDCBAndTimeoutsA VirtualProtect GlobalAlloc VerifyVersionInfoW InterlockedExchange FindFirstChangeNotificationW SearchPathW FormatMessageW SetDllDirectoryW GetModuleHandleA WritePrivateProfileStringA GetUserDefaultLCID TerminateThread GlobalUnfix SetConsoleWindowInfo InterlockedDecrement GetStartupInfoA GetSystemWow64DirectoryW CopyFileA GetPrivateProfileIntA SetCalendarInfoW DebugBreak SetConsoleCursorInfo FreeLibraryAndExitThread GetModuleFileNameA SetConsoleScreenBufferSize WaitForDebugEvent InterlockedExchangeAdd GetOEMCP GetPrivateProfileStringW CreateActCtxA GetPrivateProfileIntW ReadConsoleInputW OutputDebugStringW SetThreadAffinityMask FlushConsoleInputBuffer lstrlenA WriteConsoleW OpenMutexW GetThreadContext DeleteCriticalSection QueryDepthSList ConvertFiberToThread SetProcessPriorityBoost LockFile FreeEnvironmentStringsA GetConsoleCP CreateIoCompletionPort AllocConsole GlobalGetAtomNameW SetComputerNameA GetConsoleAliasExesLengthA CreateMailslotW GetCommState MoveFileWithProgressW GetSystemTimeAdjustment EnumSystemLocalesA GetLastError OpenWaitableTimerW OpenFileMappingW GetFileSizeEx GetConsoleAliasesLengthW SetProcessShutdownParameters FillConsoleOutputCharacterW WriteConsoleOutputCharacterA GetNumberFormatA BuildCommDCBAndTimeoutsW GetConsoleAliasExesA GetBinaryTypeW GetModuleHandleW Sleep InterlockedIncrement GetProcAddress ExitProcess MoveFileA DeleteFileA RaiseException GetStartupInfoW HeapValidate IsBadReadPtr EnterCriticalSection LeaveCriticalSection GetModuleFileNameW TlsGetValue TlsAlloc TlsSetValue GetCurrentThreadId TlsFree WriteFile GetStdHandle GetACP GetCPInfo IsValidCodePage GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent InitializeCriticalSectionAndSpinCount SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapDestroy HeapCreate HeapFree VirtualFree HeapAlloc HeapSize HeapReAlloc VirtualAlloc RtlUnwind OutputDebugStringA LoadLibraryW WideCharToMultiByte MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetFilePointer GetConsoleMode FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP CloseHandle CreateFileA

user32

CharUpperW

Sharing