244d511a2dcd91515a93e066b498a250

General

Target
244d511a2dcd91515a93e066b498a250
Size 281KB
Sample231231-csghesecdn
SHA256 329c7e139349d3ad8fb15a19a656ad32499637388d53dde448fc6fc1dbc817ed
MD5 244d511a2dcd91515a93e066b498a250
SHA1 5a486e4aec68d1f7ba29a930d7a9fe67ef40e1cf
SHA512 b92c68b3380ba5d50135b94d56b5bb00949b6b76523cefbd0878ccc4a742134868dbf035fed2f798c3e79df8d0c02c4378120d26b13635d6f40254a12a25b4e7
SSDEEP 6144:ENd/vF2wiWg1Xf3jRPslAipT5BC3fYfRu8I+iel9:E4wiF1XrRklA8VrI+ieX
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
244d511a2dcd91515a93e066b498a250

File Explorer

244d511a2dcd91515a93e066b498a250

.exe 281KB

244d511a2dcd91515a93e066b498a250

IMPHASH f841f9dee1a38a44fd841e38a1e2026e
SHA256 329c7e139349d3ad8fb15a19a656ad32499637388d53dde448fc6fc1dbc817ed
MD5 244d511a2dcd91515a93e066b498a250
SHA1 5a486e4aec68d1f7ba29a930d7a9fe67ef40e1cf
SHA512 b92c68b3380ba5d50135b94d56b5bb00949b6b76523cefbd0878ccc4a742134868dbf035fed2f798c3e79df8d0c02c4378120d26b13635d6f40254a12a25b4e7
SSDEEP 6144:ENd/vF2wiWg1Xf3jRPslAipT5BC3fYfRu8I+iel9:E4wiF1XrRklA8VrI+ieX
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

12032

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommandLineW EnumResourceNamesW lstrlenA GetStringTypeA InterlockedIncrement GetQueuedCompletionStatus ReadConsoleA GlobalLock FreeEnvironmentStringsA GetModuleHandleW GetPrivateProfileStringW WriteFile SetCommState GlobalAlloc LoadLibraryW CopyFileW GetSystemWindowsDirectoryA GetConsoleAliasExesLengthW GlobalFlags GetExitCodeProcess IsDBCSLeadByte ReadFile GetNamedPipeHandleStateW LCMapStringA GetPrivateProfileIntW InterlockedExchange GetStartupInfoA GetLastError ReadConsoleOutputCharacterA GetProcAddress VirtualAlloc GetPrivateProfileStringA OpenWaitableTimerA LoadLibraryA GetFileType SetCurrentDirectoryW HeapWalk Process32NextW CreateIoCompletionPort QueryMemoryResourceNotification GetCPInfoExA SetThreadAffinityMask TlsAlloc FindAtomW DeleteFileW GetSystemTime CopyFileExA InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection MultiByteToWideChar GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter GetModuleFileNameW HeapValidate IsBadReadPtr RaiseException RtlUnwind TerminateProcess GetCurrentProcess IsDebuggerPresent GetACP GetOEMCP GetCPInfo IsValidCodePage TlsGetValue TlsSetValue GetCurrentThreadId TlsFree SetLastError QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime ExitProcess FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetStdHandle HeapDestroy HeapCreate HeapFree VirtualFree GetModuleFileNameA FlushFileBuffers WideCharToMultiByte GetConsoleCP GetConsoleMode DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW HeapAlloc HeapSize HeapReAlloc InitializeCriticalSectionAndSpinCount LCMapStringW GetStringTypeW GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP SetFilePointer CloseHandle CreateFileA

user32

GetComboBoxInfo

winhttp

WinHttpOpen

Sharing

General

Malware Config

Signatures

File Explorer

244d511a2dcd91515a93e066b498a250

kernel32

user32

winhttp

generic