e52dd9c3f4a93bb109e3d72602d7000f02c83a230fa392b0e3ae1ac039a58b89

General

Target
e52dd9c3f4a93bb109e3d72602d7000f02c83a230fa392b0e3ae1ac039a58b89
Size 310KB
Sample230923-vqdb4aah23
SHA256 e52dd9c3f4a93bb109e3d72602d7000f02c83a230fa392b0e3ae1ac039a58b89
MD5 9201a6faa902397373c885d6d69ece9e
SHA1 7ca9268955de314da0e5d154afca5d27403073a7
SHA512 0a4952173c000338444f5df32b64369f724d3040ede8c6dd32265eaed88ced0e951596a201fcb404f5ca4f7857ad4673f803c346adff19fcd025e7b374b3961a
SSDEEP 6144:yuX2qVTqEhFrY/m+FFMaYMhCTI6NRPTh8XI/:nVTq+VY/moDYMsTvR7aQ
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e52dd9c3f4a93bb109e3d72602d7000f02c83a230fa392b0e3ae1ac039a58b89

File Explorer

e52dd9c3f4a93bb109e3d72602d7000f02c83a230fa392b0e3ae1ac039a58b89

.exe 310KB

e52dd9c3f4a93bb109e3d72602d7000f02c83a230fa392b0e3ae1ac039a58b89

IMPHASH 57ce57de917f3e031234cb31d98a05e5
SHA256 e52dd9c3f4a93bb109e3d72602d7000f02c83a230fa392b0e3ae1ac039a58b89
MD5 9201a6faa902397373c885d6d69ece9e
SHA1 7ca9268955de314da0e5d154afca5d27403073a7
SHA512 0a4952173c000338444f5df32b64369f724d3040ede8c6dd32265eaed88ced0e951596a201fcb404f5ca4f7857ad4673f803c346adff19fcd025e7b374b3961a
SSDEEP 6144:yuX2qVTqEhFrY/m+FFMaYMhCTI6NRPTh8XI/:nVTq+VY/moDYMsTvR7aQ
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

21824

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetDriveTypeW FindResourceW DeleteVolumeMountPointA EnumCalendarInfoW ReadConsoleA GetCurrentProcess SetDefaultCommConfigW CreateJobObjectW GetEnvironmentStringsW GetComputerNameW SetCommBreak GetSystemDefaultLCID FreeEnvironmentStringsA GetConsoleAliasesA ReadConsoleW GetWindowsDirectoryA EnumTimeFormatsW GetCommandLineA TzSpecificLocalTimeToSystemTime GetEnvironmentStrings GetConsoleCP GlobalAlloc LoadLibraryW SetCommConfig GetLocaleInfoW IsBadCodePtr DeleteVolumeMountPointW TransactNamedPipe EnumSystemCodePagesA GetTimeFormatW LocalReAlloc HeapQueryInformation GetConsoleAliasExesA GetStartupInfoW DisconnectNamedPipe GetNamedPipeHandleStateW SetCurrentDirectoryA GetLastError GetCurrentDirectoryW ChangeTimerQueueTimer SetLastError LocalAlloc GetFileType MoveFileA RemoveDirectoryW SetFileApisToANSI FindNextFileA GetModuleHandleA SetLocaleInfoW FatalExit RequestDeviceWakeup CreateMailslotA GetStringTypeW VirtualProtect GetCurrentDirectoryA QueryPerformanceFrequency PeekConsoleInputA GetShortPathNameW FindFirstVolumeA TerminateJobObject FindAtomW AddConsoleAliasA OpenFileMappingA EnumSystemLocalesW GetConsoleAliasesLengthW WriteConsoleInputW GetCompressedFileSizeA GetTempFileNameW DeleteFileA HeapReAlloc GetProcAddress GetModuleHandleW ExitProcess DecodePointer GetCommandLineW HeapSetInformation RaiseException UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer TerminateProcess HeapAlloc HeapFree IsProcessorFeaturePresent EnterCriticalSection LeaveCriticalSection SetFilePointer SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount DeleteCriticalSection HeapCreate TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement WriteFile GetModuleFileNameW FreeEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep SetStdHandle WideCharToMultiByte GetConsoleMode FlushFileBuffers RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar HeapSize WriteConsoleW LCMapStringW ReadFile CloseHandle CreateFileW

user32

CharUpperW

gdi32

GetTextFaceA GetCharWidthA SetBkColor

Sharing

General

Malware Config

Signatures

File Explorer

e52dd9c3f4a93bb109e3d72602d7000f02c83a230fa392b0e3ae1ac039a58b89

kernel32

user32

gdi32