01f5a1f72f3f59e7b23627dff52e6dc3d9f166b864d639d2cbe40fd8c7327ddd[.]exe

General

Target
01f5a1f72f3f59e7b23627dff52e6dc3d9f166b864d639d2cbe40fd8c7327ddd.exe
Size 828KB
Sample260824-e724sashnd
SHA256 01f5a1f72f3f59e7b23627dff52e6dc3d9f166b864d639d2cbe40fd8c7327ddd
MD5 de2d29373ade9c3b8b13c8ef6798ffc0
SHA1 0f4b8c0b9f0c9dbe972303a2072321d45ecc2ab8
SHA512 6530b6cbee303621ae356e238dae6f800288609b58bf06028dc7784bf42ea7489c4713296b8988011970934c84a4cd562f1b44420531f1188e95f8534a2ed11c
SSDEEP 24576:H8R4J3kkCbtdsWhwgDaPWqimnOP8DeXXI:H8sd6lhwgDaPWqdDeo
TLSH
T150050210B691C034F4B726F445B683B8A62E7EE19B2490CF63D12AFE57356E1EC3125B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01f5a1f72f3f59e7b23627dff52e6dc3d9f166b864d639d2cbe40fd8c7327ddd.exe

File Explorer

01f5a1f72f3f59e7b23627dff52e6dc3d9f166b864d639d2cbe40fd8c7327ddd.exe

.exe 828KB

01f5a1f72f3f59e7b23627dff52e6dc3d9f166b864d639d2cbe40fd8c7327ddd.exe

IMPHASH bb5c85780accae38869d0dd0616cda73
SHA256 01f5a1f72f3f59e7b23627dff52e6dc3d9f166b864d639d2cbe40fd8c7327ddd
MD5 de2d29373ade9c3b8b13c8ef6798ffc0
SHA1 0f4b8c0b9f0c9dbe972303a2072321d45ecc2ab8
SHA512 6530b6cbee303621ae356e238dae6f800288609b58bf06028dc7784bf42ea7489c4713296b8988011970934c84a4cd562f1b44420531f1188e95f8534a2ed11c
SSDEEP 24576:H8R4J3kkCbtdsWhwgDaPWqimnOP8DeXXI:H8sd6lhwgDaPWqdDeo
TLSH
T150050210B691C034F4B726F445B683B8A62E7EE19B2490CF63D12AFE57356E1EC3125B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

1507328

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\hagimif\winekuted-xifi72 jokejul\xipe16-da.pdb

kernel32

WriteProfileSectionW GetNumaHighestNodeNumber FindFirstVolumeW SetConsoleCursorInfo HeapLock FindFirstChangeNotificationA WaitForMultipleObjects GetNamedPipeHandleStateW FileTimeToDosDateTime EnumResourceTypesW EnumResourceNamesW GetTimeZoneInformation TerminateThread WaitForMultipleObjectsEx GetVersionExW VerifyVersionInfoA GetConsoleOutputCP SetEvent FindNextFileW CopyFileExA BuildCommDCBAndTimeoutsW GetConsoleAliasesLengthA GetCompressedFileSizeW ReadConsoleOutputCharacterA SetDefaultCommConfigA VerLanguageNameA _hread GetCommConfig WritePrivateProfileStructW FreeEnvironmentStringsW CreateTimerQueue FindVolumeClose ResetWriteWatch WriteConsoleInputA SetWaitableTimer SetComputerNameExA FindAtomA ReleaseSemaphore LocalUnlock CallNamedPipeW VirtualProtect GlobalAlloc TlsGetValue GetCommandLineW InterlockedDecrement CopyFileA AddRefActCtx OutputDebugStringW FormatMessageA GetPriorityClass WritePrivateProfileStringA GetUserDefaultLCID GlobalWire GetVersionExA HeapValidate GetWindowsDirectoryA GetStartupInfoW ConnectNamedPipe GetLastError GetCalendarInfoA GetComputerNameExW SetLastError GetSystemWow64DirectoryW CopyFileExW GetCPInfoExA GetSystemWindowsDirectoryA ContinueDebugEvent InterlockedIncrement CopyFileW GetOEMCP GetConsoleAliasA EnumResourceNamesA lstrlenA LoadLibraryW ReadConsoleA WriteConsoleA GetPrivateProfileSectionNamesA FileTimeToSystemTime GetSystemTimeAsFileTime EnumCalendarInfoExW SetThreadIdealProcessor GetConsoleAliasW GetWindowsDirectoryW GetProfileStringA CreateIoCompletionPort AllocConsole GetNumaNodeProcessorMask GetConsoleAliasExesLengthW CreateMailslotW GetCommState LocalFileTimeToFileTime CheckRemoteDebuggerPresent GetSystemTimeAdjustment _lwrite EnumSystemLocalesW GetConsoleAliasExesLengthA GetWriteWatch GetModuleHandleW GetPrivateProfileStringA GetProfileStringW CreateActCtxA GetUserDefaultLangID IsProcessInJob GetDevicePowerState AreFileApisANSI OpenWaitableTimerA OpenFileMappingW GetProcessHandleCount SetUnhandledExceptionFilter SetProcessShutdownParameters PeekNamedPipe FillConsoleOutputCharacterW FindNextVolumeMountPointA SetThreadPriority InitAtomTable AddAtomA CreateFileA WriteConsoleOutputCharacterW InitializeCriticalSection GetConsoleAliasExesA GetBinaryTypeW DebugBreak LoadLibraryA UnhandledExceptionFilter DeleteFileA RaiseException GetCommandLineA GetStartupInfoA IsBadReadPtr DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetModuleFileNameW GetProcAddress GetModuleHandleA TerminateProcess GetCurrentProcess IsDebuggerPresent Sleep ExitProcess GetModuleFileNameA WriteFile GetStdHandle SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW TlsAlloc TlsSetValue TlsFree HeapDestroy HeapCreate HeapFree VirtualFree HeapAlloc HeapSize HeapReAlloc VirtualAlloc GetACP GetCPInfo IsValidCodePage RtlUnwind InitializeCriticalSectionAndSpinCount OutputDebugStringA WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers GetConsoleCP GetConsoleMode SetFilePointer CloseHandle SetStdHandle

gdi32

GetBitmapBits

Sharing