49641e156e35418f639ebdfe60d5fe6a

General

Target
49641e156e35418f639ebdfe60d5fe6a
Size 291KB
Sample231222-b28gtsfde7
SHA256 12dce7aaaec1286f50bfbc7b5df7ad050ec5df44fb786be36e11ec582053e0a7
MD5 49641e156e35418f639ebdfe60d5fe6a
SHA1 3318f6724fdf98f8e6be0ef8e1596f10e5d18bb8
SHA512 f0065689cec947651a9029f06af2a03122b962a648d48fe921d5ac595c851c43e7ac951541b3972bbac76b4861cc4845d65b2b19e6ac1be19ac8c6feb049ef6a
SSDEEP 6144:unQtDyG4inD5cgLQl6oQsCoU1UU/TzdRDoFQ7qaz0:xtDR445cgroQ32ULzdhooV0
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49641e156e35418f639ebdfe60d5fe6a

File Explorer

49641e156e35418f639ebdfe60d5fe6a

.exe 291KB

49641e156e35418f639ebdfe60d5fe6a

IMPHASH 35e1a5a67390846ef9c927633accec41
SHA256 12dce7aaaec1286f50bfbc7b5df7ad050ec5df44fb786be36e11ec582053e0a7
MD5 49641e156e35418f639ebdfe60d5fe6a
SHA1 3318f6724fdf98f8e6be0ef8e1596f10e5d18bb8
SHA512 f0065689cec947651a9029f06af2a03122b962a648d48fe921d5ac595c851c43e7ac951541b3972bbac76b4861cc4845d65b2b19e6ac1be19ac8c6feb049ef6a
SSDEEP 6144:unQtDyG4inD5cgLQl6oQsCoU1UU/TzdRDoFQ7qaz0:xtDR445cgroQ32ULzdhooV0
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

11296

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FileTimeToDosDateTime FindFirstChangeNotificationW lstrlenA CopyFileExW TlsGetValue GetCPInfo InterlockedIncrement GetQueuedCompletionStatus ReadConsoleA CompareFileTime GlobalSize GetNamedPipeHandleStateA GlobalLock CancelWaitableTimer GetModuleHandleW GetCurrentThread GetSystemTimeAsFileTime WriteFile SetCommState GetCommandLineA GetPrivateProfileIntA LoadLibraryW CopyFileW GetSystemWindowsDirectoryA GetConsoleAliasExesLengthW GetVersionExW IsProcessorFeaturePresent TerminateProcess SetThreadPriority GetStartupInfoW LCMapStringA GetPrivateProfileIntW CreateDirectoryA InterlockedExchange GetStartupInfoA SetThreadLocale GetCPInfoExW GetLastError GetCurrentDirectoryW GetProcAddress SetFirmwareEnvironmentVariableW SearchPathA GetPrivateProfileStringA OpenWaitableTimerA LoadLibraryA Process32FirstW LocalAlloc GetFileType CreateFileMappingW SetCurrentDirectoryW SetThreadIdealProcessor HeapWalk FindAtomA SetEnvironmentVariableA QueryMemoryResourceNotification FreeEnvironmentStringsW EnumResourceNamesA GetStringTypeW RequestWakeupLatency FindAtomW ReadConsoleOutputCharacterW GetSystemTime GetProfileSectionW DeleteFileA InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetModuleFileNameW HeapValidate IsBadReadPtr RaiseException RtlUnwind GetCurrentProcess IsDebuggerPresent TlsAlloc TlsSetValue GetCurrentThreadId TlsFree SetLastError QueryPerformanceCounter GetTickCount GetCurrentProcessId ExitProcess GetEnvironmentStringsW GetCommandLineW SetHandleCount GetStdHandle HeapDestroy HeapCreate HeapFree VirtualFree GetModuleFileNameA FlushFileBuffers WideCharToMultiByte GetConsoleCP GetConsoleMode DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW HeapAlloc HeapSize HeapReAlloc VirtualAlloc GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount SetStdHandle WriteConsoleA GetConsoleOutputCP MultiByteToWideChar SetFilePointer LCMapStringW GetStringTypeA GetLocaleInfoA CloseHandle CreateFileA

user32

GetComboBoxInfo

msimg32

AlphaBlend

Sharing

General

Malware Config

Signatures

File Explorer

49641e156e35418f639ebdfe60d5fe6a

kernel32

user32

msimg32

generic