13eab4efd387348ab1a8e112bbdce157

Sharing

Copy URL Twitter E-mail

General

Target
13eab4efd387348ab1a8e112bbdce157
Size 192KB
Sample231230-kxd7vsfhe6
SHA256 a4cfaad5bd3a36c37c9a322127fb0b2643994128e93840a8f1d6634b28bbe476
MD5 13eab4efd387348ab1a8e112bbdce157
SHA1 ba61ac23348665a07872c1321249e9eee233b7fa
SHA512 ead6ba239dd1a28c670b60257ae4c6fa8268fbff49d8eefc4d94423c8b06af6822b077e98847fde1ce2fa9674e44d10b301e93564ab9bbea6923c47d6ace7309
SSDEEP 3072:vMHdJN0fOPqI4MGt9wiPGSaCYKAzskIXhkX+Lbtqj2YIkXTTF3b3TRXKVD/i9rrL:voskiWXibtqj2VsLIVD/ico
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
13eab4efd387348ab1a8e112bbdce157

File Explorer

13eab4efd387348ab1a8e112bbdce157

.exe 192KB

13eab4efd387348ab1a8e112bbdce157

IMPHASH 0589ce2226300d0a14799897a60ece46
SHA256 a4cfaad5bd3a36c37c9a322127fb0b2643994128e93840a8f1d6634b28bbe476
MD5 13eab4efd387348ab1a8e112bbdce157
SHA1 ba61ac23348665a07872c1321249e9eee233b7fa
SHA512 ead6ba239dd1a28c670b60257ae4c6fa8268fbff49d8eefc4d94423c8b06af6822b077e98847fde1ce2fa9674e44d10b301e93564ab9bbea6923c47d6ace7309
SSDEEP 3072:vMHdJN0fOPqI4MGt9wiPGSaCYKAzskIXhkX+Lbtqj2YIkXTTF3b3TRXKVD/i9rrL:voskiWXibtqj2VsLIVD/ico
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

10864

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetProcessHeap GetExitCodeProcess Sleep GetModuleFileNameW CreateProcessW GetModuleHandleW CopyFileW GetTickCount MoveFileW HeapAlloc ռ* o _ 1 CreateThread CloseHandle TerminateThread GetLastError WaitForSingleObject CreateFileW WriteFile GetCurrentProcess HeapFree GetStdHandle SetConsoleTextAttribute GetVersionExW CreateDirectoryW 1

user32

wsprintfW SendInput ReleaseDC GetSystemMetrics FindWindowW SendMessageW GetDC

gdi32

CreateCompatibleBitmap SelectObject CreateCompatibleDC DeleteObject BitBlt

advapi32

RegOpenKeyExW RegQueryValueExW LookupPrivilegeValueW AdjustTokenPrivileges OpenProcessToken RegCloseKey

shlwapi

PathFileExistsW PathRemoveFileSpecW PathFindFileNameW

8

Gd& 0 V I GdipDisposeImage GdipGetImageEncodersSize GdipSaveImageToFile

p

2 C

v

P V 0

C a 3 a 5 # A # 0 7 P Ɨñ 8 5 c 2 ��TN��eƗñ \ - t c

ñ

l �`* O 0 c

5

- 8

a

#

8 o

Sharing

General

Malware Config

Signatures

File Explorer

13eab4efd387348ab1a8e112bbdce157

kernel32

user32

gdi32

advapi32

shlwapi

8

p

v

ñ

5

a

#

generic