d1a5944ab7b8e114978a5f76088d43cb8fb9849fafe97eb3c203e17c6ebb9d01

General

Target
d1a5944ab7b8e114978a5f76088d43cb8fb9849fafe97eb3c203e17c6ebb9d01
Size 307KB
Sample230503-qlsh1aeg83
SHA256 d1a5944ab7b8e114978a5f76088d43cb8fb9849fafe97eb3c203e17c6ebb9d01
MD5 e8eaa85e6e168f6fa96d9dff24f37411
SHA1 ebfb312a27ca1d800bc058afcb8e21f2da1fe2b7
SHA512 bdf099fa2f221bd4624e1a9542003108bf9075aaad68ac13d20b5ebc8cc2b312c386ff03767adbd16d87f37f9546ab6426c0291777129878d0617de5eb3220df
SSDEEP 6144:LAbJHGhB3lsU3N/ucNImvqSMqSstDzuQCEf5rBSf3rMaqq:LAbJHUsu5dfSs1zuQCCrB4bM9
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d1a5944ab7b8e114978a5f76088d43cb8fb9849fafe97eb3c203e17c6ebb9d01

File Explorer

d1a5944ab7b8e114978a5f76088d43cb8fb9849fafe97eb3c203e17c6ebb9d01

.exe 307KB

d1a5944ab7b8e114978a5f76088d43cb8fb9849fafe97eb3c203e17c6ebb9d01

IMPHASH 0af6cbe68a12de6353b72b2b65dac90a
SHA256 d1a5944ab7b8e114978a5f76088d43cb8fb9849fafe97eb3c203e17c6ebb9d01
MD5 e8eaa85e6e168f6fa96d9dff24f37411
SHA1 ebfb312a27ca1d800bc058afcb8e21f2da1fe2b7
SHA512 bdf099fa2f221bd4624e1a9542003108bf9075aaad68ac13d20b5ebc8cc2b312c386ff03767adbd16d87f37f9546ab6426c0291777129878d0617de5eb3220df
SSDEEP 6144:LAbJHGhB3lsU3N/ucNImvqSMqSstDzuQCEf5rBSf3rMaqq:LAbJHUsu5dfSs1zuQCCrB4bM9
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

38514

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateMutexW SearchPathW GetDriveTypeW GetProfileIntW GetNumberOfConsoleInputEvents InterlockedIncrement EnumCalendarInfoW InterlockedDecrement InitializeSListHead CallNamedPipeW MoveFileWithProgressA GetTickCount GetConsoleTitleA SetCommState GlobalAlloc GetPrivateProfileIntA AddRefActCtx LoadLibraryW GetConsoleAliasExesLengthW GetStringTypeExW GetFileAttributesA GlobalFlags WriteConsoleW GetOverlappedResult GetVolumePathNameA FindNextVolumeMountPointW RaiseException GlobalUnfix GetStdHandle GetProcAddress RemoveDirectoryA SetComputerNameA VerLanguageNameW PrepareTape LoadLibraryA UnhandledExceptionFilter SetCalendarInfoW BuildCommDCBAndTimeoutsW BeginUpdateResourceA SetThreadIdealProcessor FindAtomA GetModuleFileNameA GetModuleHandleA SetLocaleInfoW lstrcatW FreeEnvironmentStringsW FindNextFileW GetStringTypeW GetCurrentDirectoryA EnumDateFormatsW SetFileShortNameA GetVolumeNameForVolumeMountPointW DeleteFileW DebugBreak EnumSystemLocalesW DeleteFileA WideCharToMultiByte InterlockedCompareExchange InterlockedExchange MultiByteToWideChar EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetLastError MoveFileA HeapFree HeapAlloc GetModuleHandleW ExitProcess GetCommandLineA HeapSetInformation GetStartupInfoW GetCPInfo RtlUnwind LCMapStringW SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess IsProcessorFeaturePresent HeapCreate WriteFile GetModuleFileNameW HeapSize CloseHandle InitializeCriticalSectionAndSpinCount GetLocaleInfoW TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale HeapReAlloc SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CreateFileW

Sharing

General

Malware Config

Signatures

File Explorer

d1a5944ab7b8e114978a5f76088d43cb8fb9849fafe97eb3c203e17c6ebb9d01

kernel32