40c624a1492477b0ed0e5c704447d95f728dfe41b7e857cd1c5018e8d3b3df65

General

Target
40c624a1492477b0ed0e5c704447d95f728dfe41b7e857cd1c5018e8d3b3df65
Size 294KB
Sample230922-ev43lsch2y
SHA256 40c624a1492477b0ed0e5c704447d95f728dfe41b7e857cd1c5018e8d3b3df65
MD5 a2d237a8dcda5047bb9e612825ebc499
SHA1 d4f6d2707f5fc415ec85dcea2b318e1c3d97209c
SHA512 8e789640a564baa078db349483844acc6f8004d1338bf61c643a9f48a358e75b382b98f991b95901a9a29cf0075962ee312bab8f26492dddd8c183d37d160f14
SSDEEP 6144:ckdkZSl4JZNfVgQl6B0zTxjq7imHvFg8F:ckdkIOJZNfNl6GzTSPe8
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40c624a1492477b0ed0e5c704447d95f728dfe41b7e857cd1c5018e8d3b3df65

File Explorer

40c624a1492477b0ed0e5c704447d95f728dfe41b7e857cd1c5018e8d3b3df65

.exe 294KB

40c624a1492477b0ed0e5c704447d95f728dfe41b7e857cd1c5018e8d3b3df65

IMPHASH 084b6573bf96e8268628649a3f2923f2
SHA256 40c624a1492477b0ed0e5c704447d95f728dfe41b7e857cd1c5018e8d3b3df65
MD5 a2d237a8dcda5047bb9e612825ebc499
SHA1 d4f6d2707f5fc415ec85dcea2b318e1c3d97209c
SHA512 8e789640a564baa078db349483844acc6f8004d1338bf61c643a9f48a358e75b382b98f991b95901a9a29cf0075962ee312bab8f26492dddd8c183d37d160f14
SSDEEP 6144:ckdkZSl4JZNfVgQl6B0zTxjq7imHvFg8F:ckdkIOJZNfNl6GzTSPe8
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

23081

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetLocaleInfoA EnumCalendarInfoA GetConsoleAliasesLengthW GetConsoleAliasExesA GetDriveTypeW FindResourceW MoveFileExW SetDefaultCommConfigW CreateJobObjectW GetNamedPipeHandleStateA SetConsoleScreenBufferSize WriteConsoleInputA AddConsoleAliasW GetTimeFormatA GetSystemDefaultLCID FreeEnvironmentStringsA ReadConsoleW GetEnvironmentStrings GetConsoleCP GlobalAlloc LoadLibraryW SetCommConfig TerminateThread GetLocaleInfoW FatalAppExitW DeleteVolumeMountPointW TransactNamedPipe LocalReAlloc GetStartupInfoW CreateMailslotW DisconnectNamedPipe GetShortPathNameA FindFirstFileW SetCurrentDirectoryA FindFirstFileA GetLastError ChangeTimerQueueTimer SetLastError GetThreadLocale CopyFileA EnumSystemCodePagesW LocalAlloc MoveFileA RemoveDirectoryW FindAtomA GetOEMCP FindNextFileA GetModuleHandleA GetProcessAffinityMask FatalExit VirtualProtect PurgeComm GetCurrentDirectoryA EnumDateFormatsW GetShortPathNameW TerminateJobObject FindAtomW GetWindowsDirectoryW FindFirstVolumeW GetFileInformationByHandle DebugBreak OpenFileMappingA EnumSystemLocalesW GetCommandLineW SetProcessAffinityMask GetComputerNameA GetPrivateProfileIntW GetProcAddress GetModuleHandleW ExitProcess DecodePointer DeleteFileA HeapReAlloc HeapSetInformation UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer TerminateProcess GetCurrentProcess EnterCriticalSection LeaveCriticalSection SetFilePointer SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement WriteFile GetModuleFileNameW HeapFree HeapCreate HeapAlloc FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep SetStdHandle WideCharToMultiByte GetConsoleMode FlushFileBuffers RtlUnwind GetCPInfo GetACP IsValidCodePage MultiByteToWideChar HeapSize IsProcessorFeaturePresent WriteConsoleW LCMapStringW GetStringTypeW ReadFile CloseHandle CreateFileW RaiseException

user32

CharUpperA

gdi32

GetTextFaceW SetBkColor GetBoundsRect

Sharing

General

Malware Config

Signatures

File Explorer

40c624a1492477b0ed0e5c704447d95f728dfe41b7e857cd1c5018e8d3b3df65

kernel32

user32

gdi32