b5135bd47baefb08673f6cbf49f38f47c0b365d048040fe848a12898e6fc1dec

General

Target
b5135bd47baefb08673f6cbf49f38f47c0b365d048040fe848a12898e6fc1dec
Size 335KB
Sample230505-k5827sbb2s
SHA256 b5135bd47baefb08673f6cbf49f38f47c0b365d048040fe848a12898e6fc1dec
MD5 6f08d00375af60db5d4838f366f2fb89
SHA1 5444cea454e28e78c4bdb4cafc3a03942a62d420
SHA512 82456f450aef8021b399bded4008d50779861d43a94e537f9ed532bd7cec0da1dd8f74cb0c8fe27564932e0231edababe983decb2b2606ab6ef3b0d48c936b7b
SSDEEP 6144:ae7hNU0oyDTPhgSEybB1XTzHjpFU1SaCQhrAcoo/OtoNol:J7DU0LDbhgbyVlTzjpEAQhccVmuNC
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b5135bd47baefb08673f6cbf49f38f47c0b365d048040fe848a12898e6fc1dec

File Explorer

b5135bd47baefb08673f6cbf49f38f47c0b365d048040fe848a12898e6fc1dec

.exe 335KB

b5135bd47baefb08673f6cbf49f38f47c0b365d048040fe848a12898e6fc1dec

IMPHASH 2ae78f9a1d4a7f418a7ddb8a7520182b
SHA256 b5135bd47baefb08673f6cbf49f38f47c0b365d048040fe848a12898e6fc1dec
MD5 6f08d00375af60db5d4838f366f2fb89
SHA1 5444cea454e28e78c4bdb4cafc3a03942a62d420
SHA512 82456f450aef8021b399bded4008d50779861d43a94e537f9ed532bd7cec0da1dd8f74cb0c8fe27564932e0231edababe983decb2b2606ab6ef3b0d48c936b7b
SSDEEP 6144:ae7hNU0oyDTPhgSEybB1XTzHjpFU1SaCQhrAcoo/OtoNol:J7DU0LDbhgbyVlTzjpEAQhccVmuNC
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

35141

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SearchPathW GetStringTypeA GetDriveTypeW GetProfileIntW GetNumberOfConsoleInputEvents BuildCommDCBAndTimeoutsA InterlockedIncrement EnumCalendarInfoW SetDefaultCommConfigW InitializeSListHead GetProfileSectionA SetComputerNameW CallNamedPipeW MoveFileWithProgressA GetTickCount ReadConsoleW SetCommState GetDriveTypeA GetVolumePathNameW GetPrivateProfileIntA AddRefActCtx LoadLibraryW FreeConsole GetConsoleAliasExesLengthW GetFileAttributesA GetOverlappedResult GetStdHandle GetCurrentDirectoryW GetProcAddress BeginUpdateResourceW SetFirmwareEnvironmentVariableW RemoveDirectoryA VerLanguageNameW PrepareTape LoadLibraryA WriteConsoleA UnhandledExceptionFilter LocalAlloc SetCalendarInfoW FindFirstVolumeMountPointW AddAtomW GlobalWire GetModuleFileNameA FindNextFileA EnumDateFormatsA GetModuleHandleA SetLocaleInfoW lstrcatW FreeEnvironmentStringsW GetStringTypeW SetThreadAffinityMask SetFileShortNameA GetVolumeNameForVolumeMountPointW DeleteFileW DebugBreak GlobalReAlloc EnumSystemLocalesW DeleteFileA WideCharToMultiByte InterlockedDecrement InterlockedCompareExchange InterlockedExchange MultiByteToWideChar EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetLastError MoveFileA HeapFree HeapAlloc GetModuleHandleW ExitProcess GetCommandLineA HeapSetInformation GetStartupInfoW GetCPInfo RaiseException RtlUnwind LCMapStringW SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess HeapCreate WriteFile GetModuleFileNameW HeapSize CloseHandle InitializeCriticalSectionAndSpinCount GetLocaleInfoW TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime IsProcessorFeaturePresent GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale HeapReAlloc SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers WriteConsoleW SetFilePointer CreateFileW

Sharing

General

Malware Config

Signatures

File Explorer

b5135bd47baefb08673f6cbf49f38f47c0b365d048040fe848a12898e6fc1dec

kernel32