048103a4210a2f0e08ed83b61a333560

General

Target
048103a4210a2f0e08ed83b61a333560
Size 13.4MB
Sample231229-1dn6qahch8
SHA256 589b440546de5c009e919895ec19b01f3d5961229af8ce1038ed48deb8990839
MD5 048103a4210a2f0e08ed83b61a333560
SHA1 15f6fa5d63b290d5e664a1b27cc4ce4c0c92a371
SHA512 e5244f9a56ecf0f311897fe29aa1cd51fbb88b58bcfa30c3b263cea8e93741c065062545794e0659e36570eaaec17db6a394788352191c03acc6a9d889fdfd4a
SSDEEP 24576:dtF49KKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKL:dtF
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
048103a4210a2f0e08ed83b61a333560

File Explorer

048103a4210a2f0e08ed83b61a333560

.exe 13.4MB

048103a4210a2f0e08ed83b61a333560

IMPHASH 12d1c12b7a6b209e706cab7edc144624
SHA256 589b440546de5c009e919895ec19b01f3d5961229af8ce1038ed48deb8990839
MD5 048103a4210a2f0e08ed83b61a333560
SHA1 15f6fa5d63b290d5e664a1b27cc4ce4c0c92a371
SHA512 e5244f9a56ecf0f311897fe29aa1cd51fbb88b58bcfa30c3b263cea8e93741c065062545794e0659e36570eaaec17db6a394788352191c03acc6a9d889fdfd4a
SSDEEP 24576:dtF49KKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKL:dtF
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

36857

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

lstrlenA AllocConsole FindResourceExW GetCurrentProcess GetModuleHandleW GetTickCount GenerateConsoleCtrlEvent ReadConsoleW WaitNamedPipeW FindActCtxSectionStringA GetConsoleCP GlobalAlloc SetFileShortNameW FreeConsole GetFileAttributesW TryEnterCriticalSection lstrlenW SetConsoleTitleA VerifyVersionInfoW ReleaseActCtx GetProcAddress AttachConsole GetTapeStatus LocalLock HeapUnlock ResetEvent LoadLibraryA HeapLock GetModuleHandleA GetPrivateProfileSectionA GetConsoleTitleW GetCurrentProcessId WriteProcessMemory ReadFile WideCharToMultiByte InterlockedIncrement InterlockedDecrement InterlockedCompareExchange InterlockedExchange MultiByteToWideChar Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree TerminateProcess IsDebuggerPresent GetCommandLineA GetStartupInfoA GetCPInfo RtlUnwind RaiseException LCMapStringW LCMapStringA GetStringTypeW ExitProcess WriteFile GetStdHandle GetModuleFileNameA HeapAlloc HeapCreate VirtualFree VirtualAlloc HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetSystemTimeAsFileTime GetStringTypeA HeapSize GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale InitializeCriticalSectionAndSpinCount CloseHandle CreateFileA GetLocaleInfoW GetConsoleMode FlushFileBuffers SetStdHandle SetFilePointer SetEndOfFile GetProcessHeap WriteConsoleA GetConsoleOutputCP WriteConsoleW

advapi32

ReportEventA

Sharing

General

Malware Config

Signatures

File Explorer

048103a4210a2f0e08ed83b61a333560

kernel32

advapi32

generic