f5fbca599d48448acc81b721f958ebd80d50ccf427ad5dfd5e247ce16e3267a4

General

Target
f5fbca599d48448acc81b721f958ebd80d50ccf427ad5dfd5e247ce16e3267a4
Size 282KB
Sample230528-kd6srsfb4s
SHA256 f5fbca599d48448acc81b721f958ebd80d50ccf427ad5dfd5e247ce16e3267a4
MD5 cdbe2750bc68ad1c3711f3e8eaff6799
SHA1 6309a5c5c605ca423e51821c0fb2408ca1e4c936
SHA512 25efd39890e9ba867d7190fb93133814ec70a47e7a72db4ad508be660aea25f32a6a9ceb899bab30bdfbc76b567ef233f0ea7264b8ee647be72e783bf5869777
SSDEEP 3072:sn5wz8rBG4dI0wmGaJCugnqY0uxDPFM08pJAxt+0nEbyz5dtn5gBTtizk:uwz8rdIAJ3M9hXHxtnEGsBTti
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5fbca599d48448acc81b721f958ebd80d50ccf427ad5dfd5e247ce16e3267a4

File Explorer

f5fbca599d48448acc81b721f958ebd80d50ccf427ad5dfd5e247ce16e3267a4

.exe 282KB

f5fbca599d48448acc81b721f958ebd80d50ccf427ad5dfd5e247ce16e3267a4

IMPHASH 2d9ed3462f8a74bfd1231e2e9de56b43
SHA256 f5fbca599d48448acc81b721f958ebd80d50ccf427ad5dfd5e247ce16e3267a4
MD5 cdbe2750bc68ad1c3711f3e8eaff6799
SHA1 6309a5c5c605ca423e51821c0fb2408ca1e4c936
SHA512 25efd39890e9ba867d7190fb93133814ec70a47e7a72db4ad508be660aea25f32a6a9ceb899bab30bdfbc76b567ef233f0ea7264b8ee647be72e783bf5869777
SSDEEP 3072:sn5wz8rBG4dI0wmGaJCugnqY0uxDPFM08pJAxt+0nEbyz5dtn5gBTtizk:uwz8rdIAJ3M9hXHxtnEGsBTti
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

20057

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleW IsBadReadPtr GetConsoleAliasesLengthA WaitForMultipleObjectsEx GetPrivateProfileIntA FreeConsole GetVersionExW WritePrivateProfileStructW MulDiv GetModuleFileNameW CreateActCtxA WritePrivateProfileStringW ReplaceFileA GetStringTypeExA GetStdHandle GetLogicalDriveStringsA OpenMutexW GetLastError ReadConsoleOutputCharacterA GetProcAddress AttachConsole SleepEx VirtualAlloc _hwrite LoadLibraryA InterlockedExchangeAdd LocalAlloc GetFileType CreateFileMappingW FindFirstVolumeMountPointW GetNumberFormatW CreateEventW GetModuleFileNameA lstrcmpiW GetModuleHandleA CreateMutexA GetFileAttributesExW GetConsoleCursorInfo ScrollConsoleScreenBufferA GetCurrentThreadId FindAtomW EnumResourceLanguagesW DebugBreak FindNextVolumeA AddConsoleAliasW CancelWaitableTimer GetCommState WaitForSingleObject GetLongPathNameA GetCommandLineA GetStartupInfoA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapFree WideCharToMultiByte SetHandleCount DeleteCriticalSection EnterCriticalSection LeaveCriticalSection Sleep ExitProcess WriteFile FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError InterlockedDecrement HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount HeapSize SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers CreateFileA CloseHandle

user32

CharLowerBuffA

gdi32

GetCharWidthW EnumFontsW GetCharABCWidthsFloatW

advapi32

MapGenericMask

Sharing

General

Malware Config

Signatures

File Explorer

f5fbca599d48448acc81b721f958ebd80d50ccf427ad5dfd5e247ce16e3267a4

kernel32

user32

gdi32

advapi32