e62fe81a4d4bd11dc112c66fd18a736dd8cb6252c1bdf22ff62e09f2a537196a

General

Target
e62fe81a4d4bd11dc112c66fd18a736dd8cb6252c1bdf22ff62e09f2a537196a
Size 197KB
Sample231011-lwdelsfa61
SHA256 766aeaa7d8a7d736f2f98ca0f932af162d2a107005a49579d6c0dcbaf6567a94
MD5 132b75d9332113116380e2b5cee89753
SHA1 47e2439390e29f5bd66bf41daa18f30973f79f41
SHA512 a9f48b5cb109df4c28c5c3831de52a2358c668836e11d67345931058af750d903acd048fbefdae6c20b2064e4e1aaf2a48587579a5c1c5b81b1961c21adb9f51
SSDEEP 6144:qYQmH5FB14TqaN1ov3FtHm7RN+5mvmTgoZzes:jQmZ/+ejv1twqsvggDs
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/e62fe81a4d4bd11dc112c66fd18a736dd8cb6252c1bdf22ff62e09f2a537196a

File Explorer

e62fe81a4d4bd11dc112c66fd18a736dd8cb6252c1bdf22ff62e09f2a537196a

.zip 197KB
e62fe81a4d4bd11dc112c66fd18a736dd8cb6252c1bdf22ff62e09f2a537196a

.exe 346KB

e62fe81a4d4bd11dc112c66fd18a736dd8cb6252c1bdf22ff62e09f2a537196a

SHA256 766aeaa7d8a7d736f2f98ca0f932af162d2a107005a49579d6c0dcbaf6567a94
MD5 132b75d9332113116380e2b5cee89753
SHA1 47e2439390e29f5bd66bf41daa18f30973f79f41
SHA512 a9f48b5cb109df4c28c5c3831de52a2358c668836e11d67345931058af750d903acd048fbefdae6c20b2064e4e1aaf2a48587579a5c1c5b81b1961c21adb9f51
SSDEEP 6144:qYQmH5FB14TqaN1ov3FtHm7RN+5mvmTgoZzes:jQmZ/+ejv1twqsvggDs
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

e62fe81a4d4bd11dc112c66fd18a736dd8cb6252c1bdf22ff62e09f2a537196a

IMPHASH 73011e4ba8dc0b0dfec2e41202c785bd
SHA256 e62fe81a4d4bd11dc112c66fd18a736dd8cb6252c1bdf22ff62e09f2a537196a
MD5 72e55ffb7ea5a7a1fb75c5c9de9b5481
SHA1 cf21337d4f4d48cd5366b97c4f7c7e940bfe419b
SHA512 56913ff5607ac74fffbf3257a68faf10883754cb5936105039329f8648af8181e2b7a28ccf077d9c7fd13e6ab277e1aade81c1db4e848e62bad8a2a780d0af47
SSDEEP 6144:2VCJljS9PgGzqLHvw1t6mAOZn4sHp4Wf953FOKcHGMTR1AVIMyhd4xb3XhYfOwh0:2V6S9PgGim8f6haOwJiKC
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

31782

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

shell32

ExtractIconExA ord137

user32

CallMsgFilterA

advapi32

AreAnyAccessesGranted

kernel32

GetProcessHeap SetStdHandle HeapSize CreateFileW UnhandledExceptionFilter FreeConsole CloseHandle GetCurrentThreadId EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer MultiByteToWideChar WideCharToMultiByte LCMapStringEx QueryPerformanceCounter GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress GetStringTypeW GetCPInfo IsProcessorFeaturePresent WriteConsoleW SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess GetCurrentProcessId InitializeSListHead IsDebuggerPresent GetStartupInfoW SetEnvironmentVariableW RaiseException RtlUnwind GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetModuleHandleExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetCommandLineA GetCommandLineW HeapAlloc HeapFree CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW

Sharing

General

Malware Config

Signatures

File Explorer

e62fe81a4d4bd11dc112c66fd18a736dd8cb6252c1bdf22ff62e09f2a537196a

e62fe81a4d4bd11dc112c66fd18a736dd8cb6252c1bdf22ff62e09f2a537196a

shell32

user32

advapi32

kernel32