621efe096e8e178b785542b8dbabe0f5

General

Target
621efe096e8e178b785542b8dbabe0f5
Size 344KB
Sample231222-ewkelachfn
SHA256 155b61f0b3fec06240999307cf0ec10cbb663db5820e31ecf2aeda7875afbcd7
MD5 621efe096e8e178b785542b8dbabe0f5
SHA1 78d50960b0353a7c2cf21a09fa58f04591748bfd
SHA512 a6bb042229fd0eb0923f6c122ad9f590263893cdd907c244f799c62d27849d76e0940055e13b845f8d1c1cfe0f52448b201c7dbfba6f53d3e7d70cbe2e0b8e64
SSDEEP 6144:pe1wKycepS20Q7Qb6sc80JjljpO6eXBGIdMUgNr5Jl/QAHRcrsRH+F:WwKXe820Q5sc844pRD7gN5/x1o
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
621efe096e8e178b785542b8dbabe0f5

File Explorer

621efe096e8e178b785542b8dbabe0f5

.exe 344KB

621efe096e8e178b785542b8dbabe0f5

IMPHASH b96546bb8656e94382ad7dab68551d5e
SHA256 155b61f0b3fec06240999307cf0ec10cbb663db5820e31ecf2aeda7875afbcd7
MD5 621efe096e8e178b785542b8dbabe0f5
SHA1 78d50960b0353a7c2cf21a09fa58f04591748bfd
SHA512 a6bb042229fd0eb0923f6c122ad9f590263893cdd907c244f799c62d27849d76e0940055e13b845f8d1c1cfe0f52448b201c7dbfba6f53d3e7d70cbe2e0b8e64
SSDEEP 6144:pe1wKycepS20Q7Qb6sc80JjljpO6eXBGIdMUgNr5Jl/QAHRcrsRH+F:WwKXe820Q5sc844pRD7gN5/x1o
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

11296

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

DosDateTimeToFileTime FindFirstChangeNotificationW lstrlenA CopyFileExW TlsGetValue SetLocalTime GetCPInfo InterlockedIncrement GetQueuedCompletionStatus ReadConsoleA CompareFileTime GlobalSize GetNamedPipeHandleStateA GlobalLock CancelWaitableTimer GetModuleHandleW GetCurrentThread GetSystemTimeAsFileTime GetPrivateProfileStringW WriteFile SetCommState GetCommandLineA GetPrivateProfileIntA LoadLibraryW CopyFileW GetSystemWindowsDirectoryA GetConsoleAliasExesLengthW GetVersionExW IsProcessorFeaturePresent TerminateProcess GetStartupInfoW LCMapStringA GetPrivateProfileIntW CreateDirectoryA InterlockedExchange GetStartupInfoA SetThreadLocale GetCPInfoExW GetLastError GetCurrentDirectoryW GetProcAddress SetFirmwareEnvironmentVariableW SearchPathA OpenWaitableTimerA LoadLibraryA Process32FirstW LocalAlloc GetFileType WritePrivateProfileStringA CreateFileMappingW SetCurrentDirectoryW SetThreadIdealProcessor HeapWalk FindAtomA SetEnvironmentVariableA GetThreadPriority QueryMemoryResourceNotification FreeEnvironmentStringsW EnumResourceNamesA GetStringTypeW RequestWakeupLatency FindAtomW ReadConsoleOutputCharacterW GetProfileSectionW DeleteFileA InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetModuleFileNameW HeapValidate IsBadReadPtr RaiseException RtlUnwind GetCurrentProcess IsDebuggerPresent TlsAlloc TlsSetValue GetCurrentThreadId TlsFree SetLastError QueryPerformanceCounter GetTickCount GetCurrentProcessId ExitProcess GetEnvironmentStringsW GetCommandLineW SetHandleCount GetStdHandle HeapDestroy HeapCreate HeapFree VirtualFree GetModuleFileNameA FlushFileBuffers WideCharToMultiByte GetConsoleCP GetConsoleMode DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW HeapAlloc HeapSize HeapReAlloc VirtualAlloc GetACP GetOEMCP IsValidCodePage InitializeCriticalSectionAndSpinCount SetStdHandle WriteConsoleA GetConsoleOutputCP MultiByteToWideChar SetFilePointer LCMapStringW GetStringTypeA GetLocaleInfoA CloseHandle CreateFileA

user32

GetComboBoxInfo

Sharing

General

Malware Config

Signatures

File Explorer

621efe096e8e178b785542b8dbabe0f5

kernel32

user32

generic