5ff1b0751e096fc76d57b018ceaa9d73b679a09937d29dcfab6955c55a6cb1f2

General

Target
5ff1b0751e096fc76d57b018ceaa9d73b679a09937d29dcfab6955c55a6cb1f2
Size 456KB
Sample231014-25f5vseb78
SHA256 5ff1b0751e096fc76d57b018ceaa9d73b679a09937d29dcfab6955c55a6cb1f2
MD5 3349b9d62225edfbfc3f45a772defd70
SHA1 15efaa816d522e864e5977657159f8dd1674f24e
SHA512 5089c557f7d15df9ed21d106aa3700b98d4ec8544d1e4317e56f33ffa90b31ecca558f6a326c7ab1828f4e4d859a5a39165c46b5a527c71949d4d1fd60fe2c61
SSDEEP 12288:1AbmEf58v6/KestdGZXByT9C2hEAx9vsX9rWtH:1xEfZdUdGZxyZCsLs1WtH
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ff1b0751e096fc76d57b018ceaa9d73b679a09937d29dcfab6955c55a6cb1f2

File Explorer

5ff1b0751e096fc76d57b018ceaa9d73b679a09937d29dcfab6955c55a6cb1f2

.exe 456KB

5ff1b0751e096fc76d57b018ceaa9d73b679a09937d29dcfab6955c55a6cb1f2

IMPHASH bf68229a10a5b0f3557967d87c458740
SHA256 5ff1b0751e096fc76d57b018ceaa9d73b679a09937d29dcfab6955c55a6cb1f2
MD5 3349b9d62225edfbfc3f45a772defd70
SHA1 15efaa816d522e864e5977657159f8dd1674f24e
SHA512 5089c557f7d15df9ed21d106aa3700b98d4ec8544d1e4317e56f33ffa90b31ecca558f6a326c7ab1828f4e4d859a5a39165c46b5a527c71949d4d1fd60fe2c61
SSDEEP 12288:1AbmEf58v6/KestdGZXByT9C2hEAx9vsX9rWtH:1xEfZdUdGZxyZCsLs1WtH
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

20621

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindResourceW LockResource LoadResource SizeofResource WriteFile WideCharToMultiByte MultiByteToWideChar GetModuleFileNameW GetVersionExW GetSystemTimeAsFileTime Sleep VirtualAlloc VirtualFree GetModuleHandleA LoadLibraryA WaitNamedPipeW PeekNamedPipe ReadFile GetModuleHandleW CloseHandle FreeLibrary GetCurrentProcessId GetCurrentThreadId CreateFileW WriteProcessMemory VirtualProtect LoadLibraryW GetProcAddress GetCurrentProcess TerminateProcess CreateFileA WriteConsoleW GetConsoleOutputCP WriteConsoleA FlushFileBuffers SetStdHandle InitializeCriticalSectionAndSpinCount GetLocaleInfoA EnterCriticalSection LeaveCriticalSection DeleteCriticalSection GetLastError UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetStartupInfoW RaiseException RtlUnwind HeapAlloc HeapFree GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError HeapSize ExitProcess GetStdHandle GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapCreate QueryPerformanceCounter GetTickCount HeapReAlloc SetFilePointer GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW

shlwapi

PathFindFileNameW

Sharing

General

Malware Config

Signatures

File Explorer

5ff1b0751e096fc76d57b018ceaa9d73b679a09937d29dcfab6955c55a6cb1f2

kernel32

shlwapi