59e8a5411275e34af604bd25c1e5855793af1d5cac444965acb493ed131c975a

General

Target
59e8a5411275e34af604bd25c1e5855793af1d5cac444965acb493ed131c975a
Size 381KB
Sample230504-p4a61aec21
SHA256 59e8a5411275e34af604bd25c1e5855793af1d5cac444965acb493ed131c975a
MD5 adab15fec1d1b6325a3ab39ac5b43281
SHA1 87322dc2a8a9eee766d728577e99664316291e88
SHA512 542d2cd73dbcc44182106a43944053e61558ba742b0af038d65f77794b3fe92e2650509a094d9ff2509e01fa6cb080b6e4ebb8fd75fd0b970f04879d663b0291
SSDEEP 6144:t/5iP/YB5uNu+3LLf2lg8GDAETAQFHzjq1vbI+rtP:95e/YB5ux7Clg8GD5TAQpzeCWP
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
59e8a5411275e34af604bd25c1e5855793af1d5cac444965acb493ed131c975a

File Explorer

59e8a5411275e34af604bd25c1e5855793af1d5cac444965acb493ed131c975a

.exe 381KB

59e8a5411275e34af604bd25c1e5855793af1d5cac444965acb493ed131c975a

IMPHASH 0f907acfe861920cd55775c62f670cb2
SHA256 59e8a5411275e34af604bd25c1e5855793af1d5cac444965acb493ed131c975a
MD5 adab15fec1d1b6325a3ab39ac5b43281
SHA1 87322dc2a8a9eee766d728577e99664316291e88
SHA512 542d2cd73dbcc44182106a43944053e61558ba742b0af038d65f77794b3fe92e2650509a094d9ff2509e01fa6cb080b6e4ebb8fd75fd0b970f04879d663b0291
SSDEEP 6144:t/5iP/YB5uNu+3LLf2lg8GDAETAQFHzjq1vbI+rtP:95e/YB5ux7Clg8GD5TAQpzeCWP
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

25148

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

AddConsoleAliasW GetComputerNameW GetModuleHandleW GetNumberFormatA ReadConsoleW EnumTimeFormatsA EnumResourceTypesA SetProcessPriorityBoost ActivateActCtx GetCalendarInfoA GetSystemWindowsDirectoryA HeapCreate EnumSystemCodePagesA FindNextVolumeW GetConsoleAliasW Beep GetModuleFileNameW GetConsoleFontSize CreateActCtxA GetACP lstrlenW GlobalUnlock EnumSystemLocalesA SetLastError GetProcAddress GetLongPathNameA VirtualAlloc HeapSize IsBadHugeWritePtr SetComputerNameW WriteProfileSectionA RemoveDirectoryA LoadLibraryA WriteConsoleA InterlockedExchangeAdd LocalAlloc QueryDosDeviceW WriteProfileSectionW AddAtomA GetDefaultCommConfigA SetConsoleCursorInfo GetConsoleTitleW GetShortPathNameW GetCPInfoExA GetDiskFreeSpaceExW FindAtomW GetWindowsDirectoryW DeleteTimerQueueTimer GetTempPathA EnumCalendarInfoExA SuspendThread CreateFileA CloseHandle WriteConsoleW GetConsoleOutputCP SetStdHandle FlushFileBuffers GetModuleHandleA WaitForSingleObject GetCurrentActCtx ReadConsoleA lstrlenA FindResourceExW BeginUpdateResourceW InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection MultiByteToWideChar GetCommandLineA GetStartupInfoA RaiseException RtlUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree TerminateProcess GetCurrentProcess IsDebuggerPresent HeapAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId ExitProcess GetCPInfo GetOEMCP IsValidCodePage SetHandleCount GetStdHandle GetFileType WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc GetLocaleInfoA GetStringTypeA GetStringTypeW InitializeCriticalSectionAndSpinCount LCMapStringA LCMapStringW SetFilePointer GetConsoleCP GetConsoleMode

user32

ToAsciiEx ChangeMenuA CharLowerBuffW SetParent CreateAcceleratorTableW GetWindowLongA GetSysColorBrush GetKeyNameTextW GetMenuInfo

gdi32

GetCharWidthA GetColorAdjustment GetCharABCWidthsW

advapi32

BackupEventLogW

Sharing

General

Malware Config

Signatures

File Explorer

59e8a5411275e34af604bd25c1e5855793af1d5cac444965acb493ed131c975a

kernel32

user32

gdi32

advapi32