55363ae4e98d38ee24d9f3421e9be5d1c7d93bbe880382a2f66d50b6ac56ebf8

Sharing

Copy URL Twitter E-mail

General

Target
55363ae4e98d38ee24d9f3421e9be5d1c7d93bbe880382a2f66d50b6ac56ebf8
Size 160KB
Sample231018-pterfafh96
SHA256 211a0c29126047073045f487f804a045fc7a7be2fd3124fa0bc0039dc99388c2
MD5 e2bbac228c89b3008f9b770c87c0cb84
SHA1 fa506585b12b90c345b7c243338c08e39ba8533e
SHA512 7db0fe0121b1cdf29ad8255930664556f902bdf3ff64820d251866a8da61c29ef2e02a15d3f51417a91585e0a6fe538d725e366e1e153c686fc90d2dbbc3f745
SSDEEP 3072:EaWvySiFQjcmA4olyn+AOKhdn9ZiYBM0B+yAVUtuxPdvkyi8qDR7TS3tBB:0vyHkA4olEOKCYBrsyQBqDRCtBB
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/55363ae4e98d38ee24d9f3421e9be5d1c7d93bbe880382a2f66d50b6ac56ebf8

File Explorer

55363ae4e98d38ee24d9f3421e9be5d1c7d93bbe880382a2f66d50b6ac56ebf8

.zip 160KB
55363ae4e98d38ee24d9f3421e9be5d1c7d93bbe880382a2f66d50b6ac56ebf8

.exe 261KB

55363ae4e98d38ee24d9f3421e9be5d1c7d93bbe880382a2f66d50b6ac56ebf8

SHA256 211a0c29126047073045f487f804a045fc7a7be2fd3124fa0bc0039dc99388c2
MD5 e2bbac228c89b3008f9b770c87c0cb84
SHA1 fa506585b12b90c345b7c243338c08e39ba8533e
SHA512 7db0fe0121b1cdf29ad8255930664556f902bdf3ff64820d251866a8da61c29ef2e02a15d3f51417a91585e0a6fe538d725e366e1e153c686fc90d2dbbc3f745
SSDEEP 3072:EaWvySiFQjcmA4olyn+AOKhdn9ZiYBM0B+yAVUtuxPdvkyi8qDR7TS3tBB:0vyHkA4olEOKCYBrsyQBqDRCtBB
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

55363ae4e98d38ee24d9f3421e9be5d1c7d93bbe880382a2f66d50b6ac56ebf8

IMPHASH fe0b386ed1fd8c25368aac6a4d3a2597
SHA256 55363ae4e98d38ee24d9f3421e9be5d1c7d93bbe880382a2f66d50b6ac56ebf8
MD5 66e1d7c5f99f1c0cb824fb3395fdb2d5
SHA1 3c07228dbde93d7a3798fc09a2442baf1532dcb5
SHA512 a8db01e8bea27eff1553c47d2c2eb0327474298831cec1c174c8ab89186c52fa9cecdc4782dee3ea41ba159686b54e383a28ee9466de87d2baa99e960b130ecf
SSDEEP 3072:x5ku96nPcAjZ5UOXzw1ldn9ZiYBM0B+yARMqlhXy5AuNltM:npicAN5UOXzw1jCYBrsyEMI/uF
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

18962

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommState GetModuleHandleExW WriteConsoleInputA CreateHardLinkA GetTickCount GetConsoleAliasesLengthA GetPriorityClass GetVolumePathNameW WideCharToMultiByte SizeofResource SetVolumeMountPointA GetSystemWindowsDirectoryA GetConsoleAliasExesLengthW GetNamedPipeInfo InterlockedExchange FillConsoleOutputCharacterW GetLastError SetLastError GetProcAddress VirtualAlloc PeekConsoleInputW BackupWrite RemoveDirectoryA SetComputerNameExA LoadLibraryA LocalAlloc SetCalendarInfoW SetConsoleCtrlHandler GetNumberFormatW BeginUpdateResourceA FoldStringW GetOEMCP FindFirstChangeNotificationA FreeEnvironmentStringsW VirtualProtect GetWindowsDirectoryW GlobalAddAtomW AddConsoleAliasA SetFileAttributesW CreateFileA CloseHandle WriteConsoleW GetConsoleAliasExesA PeekNamedPipe FindFirstFileW EnumSystemCodePagesW GetComputerNameA GetConsoleOutputCP WriteConsoleA FlushFileBuffers UnhandledExceptionFilter SetUnhandledExceptionFilter HeapFree HeapAlloc GetModuleHandleW Sleep ExitProcess GetCommandLineA GetStartupInfoA WriteFile GetStdHandle GetModuleFileNameA GetCPInfo InterlockedIncrement InterlockedDecrement GetACP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId RaiseException HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapReAlloc HeapSize TerminateProcess GetCurrentProcess IsDebuggerPresent SetHandleCount GetFileType SetFilePointer InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings GetEnvironmentStringsW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA GetModuleHandleA RtlUnwind SetStdHandle GetConsoleCP GetConsoleMode

user32

LoadMenuA CharToOemBuffW GetWindowTextLengthW ChangeDisplaySettingsW

gdi32

GetCharWidthA GetCharABCWidthsFloatA GetBitmapDimensionEx

advapi32

RegOpenKeyA

shell32

ExtractAssociatedIconW

winhttp

WinHttpReadData WinHttpOpen