4e05c01fc9dcf68548c55e81728501b4

General

Target
4e05c01fc9dcf68548c55e81728501b4
Size 336KB
Sample231226-dc2dbsbdhr
SHA256 8d167481e6f45383f10a657039cfa2bfaa4a29ccf4be55615a1fc57241e26c2d
MD5 4e05c01fc9dcf68548c55e81728501b4
SHA1 d7cb68868ecbc1d386823be8f3c11ce53724cb8d
SHA512 afa52666fb6eca90c5ab02389f8495e25d4dbd55864745f22e9439c1d1f2fbdfdc0252fdc5c31e72caa99103bfc3afcf435450c3d64258145b1ab3d971f485e7
SSDEEP 6144:c29wiaEfBcDqh3SB/igBKjB9/42u/wISrIRMK+5SS3bL:c5XEfOZ/5KjG4TLQSH
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4e05c01fc9dcf68548c55e81728501b4

File Explorer

4e05c01fc9dcf68548c55e81728501b4

.exe 336KB

4e05c01fc9dcf68548c55e81728501b4

IMPHASH 4eb4fa387aa9e72a2c5a5335b8957253
SHA256 8d167481e6f45383f10a657039cfa2bfaa4a29ccf4be55615a1fc57241e26c2d
MD5 4e05c01fc9dcf68548c55e81728501b4
SHA1 d7cb68868ecbc1d386823be8f3c11ce53724cb8d
SHA512 afa52666fb6eca90c5ab02389f8495e25d4dbd55864745f22e9439c1d1f2fbdfdc0252fdc5c31e72caa99103bfc3afcf435450c3d64258145b1ab3d971f485e7
SSDEEP 6144:c29wiaEfBcDqh3SB/igBKjB9/42u/wISrIRMK+5SS3bL:c5XEfOZ/5KjG4TLQSH
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

26163

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WriteConsoleW CreateFileW CloseHandle DecodePointer GetConsoleMode GetConsoleOutputCP FlushFileBuffers HeapReAlloc HeapSize SetFilePointerEx VirtualProtect LCMapStringW GetStringTypeW SetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW WideCharToMultiByte MultiByteToWideChar GetCommandLineW CreateThread Sleep GetProcessHeap TerminateThread GetCommandLineA GetCPInfo GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose GetFileType QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW GetCurrentProcess TerminateProcess RtlUnwind GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW HeapFree HeapAlloc RaiseException

user32

DefWindowProcW PostQuitMessage CreateWindowExA CreateWindowExW DestroyWindow EnableWindow SetForegroundWindow GetWindowRect GetWindowTextA MessageBoxA GetWindowTextLengthA UpdateWindow GetDC GrayStringA DispatchMessageW TranslateMessage GetMessageW AppendMenuW CreateMenu SetMenu LoadIconW RegisterClassW FillRect SetWindowTextA EndPaint BeginPaint SendMessageA GetWindow SetActiveWindow SendMessageW MessageBoxW

gdi32

SetDCPenColor GetStockObject SetBkMode

ws2_32

send closesocket connect htons recv socket gethostbyname WSAStartup WSACleanup

Sharing

General

Malware Config

Signatures

File Explorer

4e05c01fc9dcf68548c55e81728501b4

kernel32

user32

gdi32

ws2_32

generic