1154fd60a90314fa04892992d5c7a13a40992f68444a403bac9fbb9c78e42d7c

General

Target
1154fd60a90314fa04892992d5c7a13a40992f68444a403bac9fbb9c78e42d7c
Size 190KB
Sample240101-fe7n8sedh7
SHA256 1154fd60a90314fa04892992d5c7a13a40992f68444a403bac9fbb9c78e42d7c
MD5 038946586e2aeed678b178dca4af093d
SHA1 96080b36ad345b98d0185d9483c64772aa7146ff
SHA512 bdd9c6d2ea116eb5cdd16fbda40ab2b21de22c1a9ebf100c979cb42fb95b0e8ac70b93aafbce81e4705618e30b923139d67912331fc0d4967dabff42c6b9cb43
SSDEEP 3072:SWr5FCLv0Ho2TwOeUY1QMATiZBu1+pik4PMrBpJV2R7ZM/nlWX:rrGLv0HZeUQQMF41++PeBLmZM/n
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1154fd60a90314fa04892992d5c7a13a40992f68444a403bac9fbb9c78e42d7c

File Explorer

1154fd60a90314fa04892992d5c7a13a40992f68444a403bac9fbb9c78e42d7c

.exe 190KB

1154fd60a90314fa04892992d5c7a13a40992f68444a403bac9fbb9c78e42d7c

IMPHASH fb055c036ba4c3541a8a478c8ea82d9a
SHA256 1154fd60a90314fa04892992d5c7a13a40992f68444a403bac9fbb9c78e42d7c
MD5 038946586e2aeed678b178dca4af093d
SHA1 96080b36ad345b98d0185d9483c64772aa7146ff
SHA512 bdd9c6d2ea116eb5cdd16fbda40ab2b21de22c1a9ebf100c979cb42fb95b0e8ac70b93aafbce81e4705618e30b923139d67912331fc0d4967dabff42c6b9cb43
SSDEEP 3072:SWr5FCLv0Ho2TwOeUY1QMATiZBu1+pik4PMrBpJV2R7ZM/nlWX:rrGLv0HZeUQQMF41++PeBLmZM/n
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

15813

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedIncrement EnumCalendarInfoW OpenJobObjectA GetCurrentProcess CreateHardLinkA GetModuleHandleW GetCommConfig GetProcessHeap LoadLibraryW SizeofResource WriteConsoleW ExitThread GetVolumePathNameA LCMapStringA InterlockedExchange GetLastError SetLastError GetProcAddress VirtualAlloc BeginUpdateResourceW BackupWrite LocalAlloc RemoveDirectoryW BeginUpdateResourceA AddAtomA DeviceIoControl GlobalFindAtomW FindFirstVolumeMountPointA VirtualProtect _lopen GetVersionExA FindAtomW GetWindowsDirectoryW EnumResourceLanguagesW OpenFileMappingA lstrcpyA CreateFileA GetThreadContext OpenMutexA GetComputerNameA InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetStartupInfoW RaiseException RtlUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter HeapFree TerminateProcess IsDebuggerPresent HeapAlloc ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW GetModuleHandleA LoadLibraryA InitializeCriticalSectionAndSpinCount WideCharToMultiByte LCMapStringW

user32

WindowFromDC GetCaretPos

gdi32

GetDeviceGammaRamp

advapi32

BackupEventLogA ClearEventLogA

Sharing

General

Malware Config

Signatures

File Explorer

1154fd60a90314fa04892992d5c7a13a40992f68444a403bac9fbb9c78e42d7c

kernel32

user32

gdi32

advapi32

generic