18edbcf4e42cf6a5e56b077be965d38b

General

Target
18edbcf4e42cf6a5e56b077be965d38b
Size 221KB
Sample231230-py62gsbcer
SHA256 90961b56f9c43fccca4fb0b480fd4335927ee4c87ea01a9656dba976d49ac5ab
MD5 18edbcf4e42cf6a5e56b077be965d38b
SHA1 53c3daa49eae84c08d91d3a949f9299e82d32d11
SHA512 6fe68887a483366d8a0ad0d769e8ce9ae88661ac5beb951c9035d8ef27b610033531410546db8fe65ee2be7c1732d69640faeaf0dc32761710a4508e84bb3afe
SSDEEP 3072:btq9Po+8gHubhE8H7BWuiEn34fgVJB294lRSwD5WmQ7sI5/DuT61m:I6tg6PHP44VJIalM7T7sI5/
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18edbcf4e42cf6a5e56b077be965d38b

File Explorer

18edbcf4e42cf6a5e56b077be965d38b

.exe 221KB

18edbcf4e42cf6a5e56b077be965d38b

IMPHASH d58ad3fff7de7656678e7a59274fcc7b
SHA256 90961b56f9c43fccca4fb0b480fd4335927ee4c87ea01a9656dba976d49ac5ab
MD5 18edbcf4e42cf6a5e56b077be965d38b
SHA1 53c3daa49eae84c08d91d3a949f9299e82d32d11
SHA512 6fe68887a483366d8a0ad0d769e8ce9ae88661ac5beb951c9035d8ef27b610033531410546db8fe65ee2be7c1732d69640faeaf0dc32761710a4508e84bb3afe
SSDEEP 3072:btq9Po+8gHubhE8H7BWuiEn34fgVJB294lRSwD5WmQ7sI5/DuT61m:I6tg6PHP44VJIalM7T7sI5/
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

9965

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

lstrlenA GetConsoleAliasesLengthW GetDefaultCommConfigW HeapAlloc _lwrite InterlockedDecrement SetMailslotInfo GetSystemWindowsDirectoryW SetEnvironmentVariableW GetUserDefaultLCID SetConsoleScreenBufferSize SetVolumeMountPointW GetConsoleAliasesLengthA GetCommandLineA GetEnvironmentStrings GetConsoleCP ReadConsoleInputA WriteConsoleOutputA GetVersionExW GetComputerNameExA lstrcpynW GetFileAttributesW LocalReAlloc WriteConsoleW HeapQueryInformation ReadFile GetModuleFileNameW CreateTimerQueue InterlockedExchange ChangeTimerQueueTimer SetLastError GetProcAddress PeekConsoleInputW BeginUpdateResourceW EnumDateFormatsExA RemoveDirectoryA EnterCriticalSection ResetEvent GetLocalTime LoadLibraryA OpenMutexA IsWow64Process GlobalGetAtomNameW GetCurrentConsoleFont GetOEMCP GetModuleHandleA GetConsoleTitleW BuildCommDCBA VirtualProtect GetFileAttributesExW FindFirstVolumeA ReleaseMutex GetVersion GetCurrentProcessId GetConsoleProcessList EnumCalendarInfoExA CreateThread GetTimeZoneInformation GetSystemDefaultLangID CreateFileA SetStdHandle UnhandledExceptionFilter SetUnhandledExceptionFilter GetModuleHandleW Sleep ExitProcess GetStartupInfoA RaiseException RtlUnwind GetLastError WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent HeapFree LeaveCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId DeleteCriticalSection InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime VirtualAlloc HeapReAlloc GetCPInfo GetACP IsValidCodePage HeapSize GetLocaleInfoA GetConsoleMode FlushFileBuffers LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP

user32

RealGetWindowClassA GetCaretPos

Sharing

General

Malware Config

Signatures

File Explorer

18edbcf4e42cf6a5e56b077be965d38b

kernel32

user32

generic