02e6e0fff56a1db82154a86353cfdc25

General

Target
02e6e0fff56a1db82154a86353cfdc25
Size 12.6MB
Sample231229-y4j9cabbdk
SHA256 32475795e264d58fd9a01f5a1f14fd16e2f94d923cd719fca0617da62d8f9182
MD5 02e6e0fff56a1db82154a86353cfdc25
SHA1 11dfbe935128109e2d29f3f45e48c1ec1fd1f81f
SHA512 e63d6108816aa6199f6e7d5d9d7eb28730af023a46f32bdf4acb397f3d1d121c8be4dcb5b19a42fab9ead5bf4ecb80d7027d0fe7eabdf6c8e17bf5f487fe94b7
SSDEEP 6144:z++HTeIs6oVVS5Cze5KnyTlgktVUvKBpXtnx:LHKIs6ozS5ynyqktVUvCh/
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02e6e0fff56a1db82154a86353cfdc25

File Explorer

02e6e0fff56a1db82154a86353cfdc25

.exe 12.6MB

02e6e0fff56a1db82154a86353cfdc25

IMPHASH 5bc76f4349f7f0afe0c88e229f50d37f
SHA256 32475795e264d58fd9a01f5a1f14fd16e2f94d923cd719fca0617da62d8f9182
MD5 02e6e0fff56a1db82154a86353cfdc25
SHA1 11dfbe935128109e2d29f3f45e48c1ec1fd1f81f
SHA512 e63d6108816aa6199f6e7d5d9d7eb28730af023a46f32bdf4acb397f3d1d121c8be4dcb5b19a42fab9ead5bf4ecb80d7027d0fe7eabdf6c8e17bf5f487fe94b7
SSDEEP 6144:z++HTeIs6oVVS5Cze5KnyTlgktVUvKBpXtnx:LHKIs6ozS5ynyqktVUvCh/
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

5472

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GlobalFix GetFileSize OpenFile SetLocalTime SetEndOfFile GetNumberOfConsoleInputEvents FindResourceExW GetCommState InterlockedDecrement ScrollConsoleScreenBufferW GetProfileSectionA WriteConsoleInputA SetComputerNameW GetComputerNameW CallNamedPipeW GetModuleHandleW GetSystemWow64DirectoryA CreateDirectoryExW GetDriveTypeA TlsSetValue GlobalAlloc AddRefActCtx GetVolumeInformationA Sleep ReadFileScatter GetSystemTimeAdjustment GetVersionExW InterlockedPopEntrySList GlobalFlags Beep VerifyVersionInfoA GetBinaryTypeA ReadFile CompareStringW GetACP lstrlenW GlobalUnlock GetConsoleOutputCP CreateDirectoryA InterlockedExchange GetStdHandle EnumResourceNamesW OpenMutexW IsDBCSLeadByteEx GetProcAddress SetVolumeLabelW WriteProfileSectionA FreeUserPhysicalPages CreateMemoryResourceNotification SearchPathA GetPrivateProfileStringA SetFileApisToOEM GetAtomNameA Process32FirstW OpenWaitableTimerW IsSystemResumeAutomatic GetCommMask AddAtomA GetSystemInfo SetSystemTime EnumResourceTypesW SetConsoleCursorInfo CreateIoCompletionPort WaitCommEvent SetConsoleTitleW GetModuleHandleA FreeEnvironmentStringsW GetConsoleTitleW BuildCommDCBA GetCurrentDirectoryA CompareStringA SetCalendarInfoA GetWindowsDirectoryW GetCurrentProcessId SuspendThread LCMapStringW CopyFileExA DeleteFileA CreateFileA FindFirstFileA GetCommandLineW GetLastError MoveFileA GetStartupInfoW HeapValidate IsBadReadPtr RaiseException EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW DeleteCriticalSection QueryPerformanceCounter GetTickCount GetCurrentThreadId GetSystemTimeAsFileTime InterlockedIncrement ExitProcess GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsFree SetLastError HeapDestroy HeapCreate HeapFree VirtualFree GetModuleFileNameA WriteFile HeapAlloc HeapSize HeapReAlloc VirtualAlloc GetOEMCP GetCPInfo IsValidCodePage RtlUnwind DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW LoadLibraryW MultiByteToWideChar InitializeCriticalSectionAndSpinCount LoadLibraryA WideCharToMultiByte LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers GetConsoleCP GetConsoleMode SetFilePointer CloseHandle SetStdHandle WriteConsoleA

user32

GetMenuBarInfo GetMenuInfo GetComboBoxInfo GetListBoxInfo

advapi32

InitiateSystemShutdownW

Sharing

General

Malware Config

Signatures

File Explorer

02e6e0fff56a1db82154a86353cfdc25

kernel32

user32

advapi32

generic