f50d0f3ff38f7407ab1313ab14067fb3912b810147c265fefd1a9651f53b4fd9

General

Target
f50d0f3ff38f7407ab1313ab14067fb3912b810147c265fefd1a9651f53b4fd9
Size 380KB
Sample230504-2sfcssfe72
SHA256 f50d0f3ff38f7407ab1313ab14067fb3912b810147c265fefd1a9651f53b4fd9
MD5 203b02d84f569302d42f5eedd2293249
SHA1 637be60134a9dc2b9e6ae5537e113a68260918ff
SHA512 d8b8470f1d909385b95fcb48827ea3926833bef5b2bbfda6071d0e5ed6913ae2c64e691624839ae311ce40788f32cfaf55ce28ca53871a9a3d6bffe3e4f3633e
SSDEEP 3072:+t2aR6gCwC7T4nPKIK1G+xCuZwb6LyvUdwkQWXn8qFGsS2nPHTPKD5hudu4UW6xY:ZUAwFP+I0MUdwun8pGMuTWty
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f50d0f3ff38f7407ab1313ab14067fb3912b810147c265fefd1a9651f53b4fd9

File Explorer

f50d0f3ff38f7407ab1313ab14067fb3912b810147c265fefd1a9651f53b4fd9

.exe 380KB

f50d0f3ff38f7407ab1313ab14067fb3912b810147c265fefd1a9651f53b4fd9

IMPHASH 405d30f2af5701980296932df5084009
SHA256 f50d0f3ff38f7407ab1313ab14067fb3912b810147c265fefd1a9651f53b4fd9
MD5 203b02d84f569302d42f5eedd2293249
SHA1 637be60134a9dc2b9e6ae5537e113a68260918ff
SHA512 d8b8470f1d909385b95fcb48827ea3926833bef5b2bbfda6071d0e5ed6913ae2c64e691624839ae311ce40788f32cfaf55ce28ca53871a9a3d6bffe3e4f3633e
SSDEEP 3072:+t2aR6gCwC7T4nPKIK1G+xCuZwb6LyvUdwkQWXn8qFGsS2nPHTPKD5hudu4UW6xY:ZUAwFP+I0MUdwun8pGMuTWty
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

24812

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WaitForSingleObject AddConsoleAliasW GetComputerNameW GetModuleHandleW GetNumberFormatA ReadConsoleW GetWindowsDirectoryA EnumTimeFormatsW CreateActCtxW EnumResourceTypesA SetProcessPriorityBoost ActivateActCtx FindResourceExA GetCalendarInfoA GetSystemWindowsDirectoryA HeapCreate EnumSystemCodePagesA FindNextVolumeW GetConsoleAliasW Beep GetModuleFileNameW GetACP lstrlenW GlobalUnlock EnumSystemLocalesA GetConsoleAliasesW GetCPInfoExW GetLastError GetLongPathNameW GetProcAddress VirtualAlloc HeapSize QueryDosDeviceA BeginUpdateResourceW WriteProfileSectionA RemoveDirectoryA SetComputerNameA LoadLibraryA WriteConsoleA InterlockedExchangeAdd LocalAlloc WriteProfileSectionW AddAtomA GetDefaultCommConfigA SetConsoleCursorInfo GetConsoleTitleW GetShortPathNameW GetDiskFreeSpaceExW FindAtomW GetWindowsDirectoryW DeleteTimerQueueTimer GetFileInformationByHandle GetTempPathA EnumCalendarInfoExA GetConsoleSelectionInfo SuspendThread CreateFileA CloseHandle WriteConsoleW GetConsoleOutputCP SetStdHandle FlushFileBuffers GetModuleHandleA GetCurrentActCtx SetProcessAffinityMask ReadConsoleA SetWaitableTimer lstrlenA IsBadHugeWritePtr InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection MultiByteToWideChar GetCommandLineA GetStartupInfoA RaiseException RtlUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter HeapFree TerminateProcess GetCurrentProcess IsDebuggerPresent HeapAlloc GetCPInfo GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId SetHandleCount GetStdHandle GetFileType ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetLocaleInfoA GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW SetFilePointer GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount

user32

ToAsciiEx ChangeMenuA CharLowerBuffW SetParent CreateAcceleratorTableW GetWindowLongA GetSysColorBrush GetKeyNameTextW GetMenuInfo

gdi32

GetCharWidthA GetCharABCWidthsW GetColorAdjustment

advapi32

BackupEventLogW

Sharing

General

Malware Config

Signatures

File Explorer

f50d0f3ff38f7407ab1313ab14067fb3912b810147c265fefd1a9651f53b4fd9

kernel32

user32

gdi32

advapi32