251b58c611c1d57b144079ed1c7b2d21abd471d85f16e83910d1cb6f3a91b6d0

General

Target
251b58c611c1d57b144079ed1c7b2d21abd471d85f16e83910d1cb6f3a91b6d0
Size 1.4MB
Sample231124-slg4dada7v
SHA256 251b58c611c1d57b144079ed1c7b2d21abd471d85f16e83910d1cb6f3a91b6d0
MD5 4a23d69603028d1b08d051b36d95f458
SHA1 8e396830a24ce45d0dd7cfee6a1f56f7452e3f0e
SHA512 e2be18acce4f6e5c501da565c78066bebfc9094fb0b69654ab225a10a83ea3eabb1d4bd79f2c267e3b6f87180dfca21afc26ccd44ff41baacce4cafc682978cb
SSDEEP 24576:Z7zNkhm5PBXUsqjnhMgeiCl7G0nehbGZpbD:VNEm5ZXwDmg27RnWGj
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
251b58c611c1d57b144079ed1c7b2d21abd471d85f16e83910d1cb6f3a91b6d0

File Explorer

251b58c611c1d57b144079ed1c7b2d21abd471d85f16e83910d1cb6f3a91b6d0

.exe 1.4MB

251b58c611c1d57b144079ed1c7b2d21abd471d85f16e83910d1cb6f3a91b6d0

IMPHASH e00d60405a249a05d3b09aa7fe924b17
SHA256 251b58c611c1d57b144079ed1c7b2d21abd471d85f16e83910d1cb6f3a91b6d0
MD5 4a23d69603028d1b08d051b36d95f458
SHA1 8e396830a24ce45d0dd7cfee6a1f56f7452e3f0e
SHA512 e2be18acce4f6e5c501da565c78066bebfc9094fb0b69654ab225a10a83ea3eabb1d4bd79f2c267e3b6f87180dfca21afc26ccd44ff41baacce4cafc682978cb
SSDEEP 24576:Z7zNkhm5PBXUsqjnhMgeiCl7G0nehbGZpbD:VNEm5ZXwDmg27RnWGj
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

46610

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleFileNameW GetLastError CloseHandle GetProcAddress CreateProcessW FreeLibrary GetTempFileNameW LoadLibraryExW GetCommandLineW GetModuleHandleW WriteConsoleW RaiseException GetSystemInfo VirtualProtect VirtualQuery LoadLibraryExA UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW LocalFree FormatMessageA CreateDirectoryW CreateFileW DeleteFileW FindClose FindFirstFileExW FindNextFileW GetFileAttributesExW GetFileInformationByHandle RemoveDirectoryW SetFilePointerEx AreFileApisANSI SetLastError CopyFileW MultiByteToWideChar WideCharToMultiByte InitializeCriticalSectionAndSpinCount SwitchToThread TlsAlloc TlsGetValue TlsSetValue TlsFree RtlUnwind EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer GetStdHandle WriteFile ExitProcess GetModuleHandleExW GetCPInfo HeapAlloc HeapFree IsValidCodePage GetACP GetOEMCP GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetFileType GetStringTypeW LCMapStringW GetProcessHeap HeapSize HeapReAlloc FlushFileBuffers GetConsoleOutputCP GetConsoleMode DecodePointer

ole32

CoTaskMemFree

Sharing

General

Malware Config

Signatures

File Explorer

251b58c611c1d57b144079ed1c7b2d21abd471d85f16e83910d1cb6f3a91b6d0

kernel32

ole32

generic