15955627bb0532349314f9dd256f5625

General

Target
15955627bb0532349314f9dd256f5625
Size 13.6MB
Sample231230-maf42sffar
SHA256 7d3055e4e20d9b0232ca87992744baeefd6fe0522f8a1b35c82f930f4cd9d9b8
MD5 15955627bb0532349314f9dd256f5625
SHA1 358a42d0eb46b601f5f6ccd4a53c1654402f706b
SHA512 8ff8c2df63cfed5f8da2c250dd4fc360b2ae5f1d7a5c2529bd83cc644e6a291d25bc8b2ee10f3d19c580495c016d7992ed12f98ac2d8d06686355bfd2f1b7c82
SSDEEP 24576:Nm1111111111111111111111111111111111111111111111111111111111111n:
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15955627bb0532349314f9dd256f5625

File Explorer

15955627bb0532349314f9dd256f5625

.exe 13.6MB

15955627bb0532349314f9dd256f5625

IMPHASH 5cf8ab4c07bd680cc3ad63fcf1e8b997
SHA256 7d3055e4e20d9b0232ca87992744baeefd6fe0522f8a1b35c82f930f4cd9d9b8
MD5 15955627bb0532349314f9dd256f5625
SHA1 358a42d0eb46b601f5f6ccd4a53c1654402f706b
SHA512 8ff8c2df63cfed5f8da2c250dd4fc360b2ae5f1d7a5c2529bd83cc644e6a291d25bc8b2ee10f3d19c580495c016d7992ed12f98ac2d8d06686355bfd2f1b7c82
SSDEEP 24576:Nm1111111111111111111111111111111111111111111111111111111111111n:
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

84486

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasesLengthA InterlockedExchangeAdd CreateTapePartition GetSystemDefaultLCID CreateActCtxA GetCPInfoExW WriteConsoleInputW ReadConsoleInputA InitializeSListHead SetConsoleDisplayMode WriteConsoleA VerifyVersionInfoW CreateFileW WritePrivateProfileSectionA GetPrivateProfileSectionA EnumDateFormatsExA DeleteTimerQueue LoadLibraryW VirtualFree SetConsoleCP FindFirstVolumeA ReadFile BuildCommDCBW VerLanguageNameA SetFileApisToANSI GetConsoleCP LeaveCriticalSection SetEvent GetExitCodeThread EndUpdateResourceW GetCPInfoExA SetLastError UpdateResourceA SetConsoleTitleW FindClose LoadLibraryExA CopyFileW ReadConsoleA ZombifyActCtx CreateActCtxW HeapUnlock DnsHostnameToComputerNameA ReadConsoleOutputA GlobalFindAtomW GetSystemWindowsDirectoryW GetUserDefaultLCID BuildCommDCBAndTimeoutsA GetGeoInfoA GetCurrentProcess VirtualProtect GetProcAddress GetModuleHandleW CreateThread GetVersionExA GetProcessAffinityMask WaitForSingleObject SetConsoleCursorPosition VerifyVersionInfoA lstrlenA WriteConsoleOutputCharacterW GetFileAttributesExA GetComputerNameA SetCriticalSectionSpinCount GetConsoleAliasA GetSystemTime GetDiskFreeSpaceW CreateFileA InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection RtlUnwind RaiseException GetLastError HeapFree TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapReAlloc HeapAlloc GetStartupInfoW LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetCPInfo TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualAlloc SetHandleCount GetStdHandle GetFileType GetStartupInfoA SetFilePointer ExitProcess WriteFile GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA GetStringTypeW HeapSize EnumSystemLocalesA IsValidLocale InitializeCriticalSectionAndSpinCount SetStdHandle LoadLibraryA GetConsoleMode FlushFileBuffers GetLocaleInfoW GetConsoleOutputCP WriteConsoleW CloseHandle

user32

GetAltTabInfoW RealChildWindowFromPoint

Sharing

General

Malware Config

Signatures

File Explorer

15955627bb0532349314f9dd256f5625

kernel32

user32

generic