1e1dfd75b188edb3e434a7345419732f

General

Target
1e1dfd75b188edb3e434a7345419732f
Size 283KB
Sample231230-15bdyaacgn
SHA256 83611467088ec8eb70f5a1194ba7e5de4dc080a14653e4b44ef29b6af0947005
MD5 1e1dfd75b188edb3e434a7345419732f
SHA1 2f3cf82c812532fec99ce9a0938c54622c81aa58
SHA512 aad4741a29280204035709caf5c9bd17565ae01d066f4c4dfe1959e773882831a8370b706eae73b3a336eaa7d265a630ff8b6c5b49299fa7b39c047d70d5e021
SSDEEP 3072:SV6A8Ct9eaIt5jDTaRO2MyZdckRcifRRJES6fzwjCRd5K1dFnArywoOLi6pW:puSaItBPaRiyfcklvEyq5AnRwoOL3
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1e1dfd75b188edb3e434a7345419732f

File Explorer

1e1dfd75b188edb3e434a7345419732f

.exe 283KB

1e1dfd75b188edb3e434a7345419732f

IMPHASH cc9eff21144ed22ef598d26ba22e8d47
SHA256 83611467088ec8eb70f5a1194ba7e5de4dc080a14653e4b44ef29b6af0947005
MD5 1e1dfd75b188edb3e434a7345419732f
SHA1 2f3cf82c812532fec99ce9a0938c54622c81aa58
SHA512 aad4741a29280204035709caf5c9bd17565ae01d066f4c4dfe1959e773882831a8370b706eae73b3a336eaa7d265a630ff8b6c5b49299fa7b39c047d70d5e021
SSDEEP 3072:SV6A8Ct9eaIt5jDTaRO2MyZdckRcifRRJES6fzwjCRd5K1dFnArywoOLi6pW:puSaItBPaRiyfcklvEyq5AnRwoOL3
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

130935

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnterCriticalSection GetConsoleAliasesLengthA InterlockedExchangeAdd CreateTapePartition GetSystemDefaultLCID CreateActCtxA GetCPInfoExW WriteConsoleInputW ReadConsoleInputW InterlockedPopEntrySList SetConsoleDisplayMode WriteConsoleA GetConsoleCP VerifyVersionInfoW CreateFileW WritePrivateProfileSectionW GetPrivateProfileSectionA EnumDateFormatsExA CancelTimerQueueTimer LoadLibraryA FlushInstructionCache SetConsoleCP FindFirstVolumeA ReadFile BuildCommDCBW VerLanguageNameW SetFileApisToANSI WriteProcessMemory LeaveCriticalSection SetEvent GetExitCodeThread EndUpdateResourceA GetCPInfoExA GetLastError UpdateResourceA SetConsoleTitleW FindClose LoadLibraryExA CopyFileW ReadConsoleA ZombifyActCtx AddRefActCtx HeapUnlock DnsHostnameToComputerNameA ReadConsoleOutputW GetProcessHeaps GetSystemWindowsDirectoryA GetUserDefaultLCID BuildCommDCBAndTimeoutsA IsWow64Process UnmapViewOfFile GetAtomNameW HeapSize GetGeoInfoA GetCurrentProcess VirtualProtect GetProcAddress GetModuleHandleA CreateThread GetVersionExW GetProcessAffinityMask WaitForSingleObject SetConsoleCursorInfo VerifyVersionInfoA WriteConsoleOutputCharacterA GetFileAttributesExA GetComputerNameA CommConfigDialogW GetConsoleAliasA GetSystemTimeAsFileTime GetDiskFreeSpaceW InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection RaiseException RtlUnwind HeapReAlloc HeapAlloc GetCommandLineA GetStartupInfoA UnhandledExceptionFilter SetUnhandledExceptionFilter HeapFree TerminateProcess IsDebuggerPresent GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId SetHandleCount GetStdHandle GetFileType SetFilePointer HeapCreate VirtualFree VirtualAlloc ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW InitializeCriticalSectionAndSpinCount SetStdHandle GetConsoleMode FlushFileBuffers LCMapStringA LCMapStringW GetConsoleOutputCP WriteConsoleW CloseHandle CreateFileA

user32

GetAltTabInfoA RealChildWindowFromPoint

Sharing

General

Malware Config

Signatures

File Explorer

1e1dfd75b188edb3e434a7345419732f

kernel32

user32

generic