eee458a99c91773892bbd37345bed29cd16c68fdc4b5289a39a61aa89baed5e5

General

Target
eee458a99c91773892bbd37345bed29cd16c68fdc4b5289a39a61aa89baed5e5
Size 270KB
Sample231020-e83fyafd57
SHA256 eee458a99c91773892bbd37345bed29cd16c68fdc4b5289a39a61aa89baed5e5
MD5 a1b385a317272c87219e9b726688f4a6
SHA1 1db768ec012b763be1ec3c0955beb82aadbda943
SHA512 2032db65fdbf7ae9e0ccbc22cfb9605ed08b5cf713b1450c498793b7f56ca5830d68afaba4009afa7ea6626e32e170751ff237edd27a04efbbbe1cf9e23b776c
SSDEEP 3072:XABN+XMKoRSGhlMZDIaaI2a067pYOGg1QDxmn5tJN+5KcPw3v:4EMLSwlMZDVv2967n164Nnbv
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eee458a99c91773892bbd37345bed29cd16c68fdc4b5289a39a61aa89baed5e5

File Explorer

eee458a99c91773892bbd37345bed29cd16c68fdc4b5289a39a61aa89baed5e5

.exe 270KB

eee458a99c91773892bbd37345bed29cd16c68fdc4b5289a39a61aa89baed5e5

IMPHASH 9c770132da8ec08642c74c5b0fdc7b5e
SHA256 eee458a99c91773892bbd37345bed29cd16c68fdc4b5289a39a61aa89baed5e5
MD5 a1b385a317272c87219e9b726688f4a6
SHA1 1db768ec012b763be1ec3c0955beb82aadbda943
SHA512 2032db65fdbf7ae9e0ccbc22cfb9605ed08b5cf713b1450c498793b7f56ca5830d68afaba4009afa7ea6626e32e170751ff237edd27a04efbbbe1cf9e23b776c
SSDEEP 3072:XABN+XMKoRSGhlMZDIaaI2a067pYOGg1QDxmn5tJN+5KcPw3v:4EMLSwlMZDVv2967n164Nnbv
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

29470

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetLocaleInfoA CommConfigDialogA GetCPInfo FindResourceExW FindResourceW BuildCommDCBAndTimeoutsA DeleteVolumeMountPointA WaitNamedPipeA SetDefaultCommConfigW GetEnvironmentStringsW GetModuleHandleExW CreateHardLinkA GetModuleHandleW ConvertFiberToThread GetConsoleAliasExesW EnumTimeFormatsA EnumTimeFormatsW GetCommandLineA GetDriveTypeA GetEnvironmentStrings GlobalAlloc LoadLibraryW FatalAppExitW ReadConsoleInputA CopyFileW SetConsoleCP GetFileAttributesA SetSystemPowerState ReadFile GetCompressedFileSizeA FindNextVolumeMountPointW GetStartupInfoW RaiseException GetComputerNameA GetConsoleAliasesW FindFirstFileA GetLastError SetLastError PeekConsoleInputW SetVolumeLabelW MoveFileW EnumSystemCodePagesW FreeUserPhysicalPages SetComputerNameA VerLanguageNameW GetTempFileNameA FindClose CreateEventW RemoveDirectoryW HeapLock GetCommMask AddAtomA FoldStringW FindNextFileA SetConsoleTitleW FindNextFileW VirtualProtect QueryPerformanceFrequency OpenSemaphoreW ReadConsoleInputW GetWindowsDirectoryW GetVolumeNameForVolumeMountPointW ReadConsoleOutputCharacterW EnumSystemLocalesW DeleteFileA CreateFileW WriteConsoleW GetShortPathNameA GetSystemDefaultLangID FlushFileBuffers SetStdHandle MoveFileA WideCharToMultiByte HeapAlloc GetProcAddress ExitProcess DecodePointer HeapReAlloc GetCommandLineW HeapSetInformation IsProcessorFeaturePresent EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer TerminateProcess GetCurrentProcess InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId WriteFile GetModuleFileNameW HeapCreate HeapFree CloseHandle FreeEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep SetFilePointer GetConsoleCP GetConsoleMode RtlUnwind LCMapStringW MultiByteToWideChar GetStringTypeW HeapSize

user32

CharUpperW

advapi32

AbortSystemShutdownW

shell32

DragAcceptFiles

Sharing

General

Malware Config

Signatures

File Explorer

eee458a99c91773892bbd37345bed29cd16c68fdc4b5289a39a61aa89baed5e5

kernel32

user32

advapi32

shell32

generic