nczyp5x21l5el[.]exe

General

Target
nczyp5x21l5el.exe
Size 240KB
Sample240104-bzn1eaeean
SHA256 30205eaf6f581036262bfc099dfc5cc5d0e4d771dca3d1c4cf3dada59d097672
MD5 5c1b720ec28a3d4af24a19003fb56f50
SHA1 fa8c1236c3e7bc4d002be0abf5523659bf4c9af8
SHA512 178e4b5633b1c4d455555b394940d6b240dc4da22e621e6c91035870f3e275b25881ea712fc7b73a4e73d9d9376045834fb00b3d03454616d877ecd3cd91790c
SSDEEP 3072:JQT/QLtwugcvGMI9+x7alYjt8T/NOOZ/M5l/evBr+jL+0geRp:JE/QLXgSh7aSjtGZ/M5lP3ge
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
nczyp5x21l5el.exe

File Explorer

nczyp5x21l5el.exe

.exe 240KB

nczyp5x21l5el.exe

IMPHASH 08fc0ef0426f847a4d643196bc40d8e6
SHA256 30205eaf6f581036262bfc099dfc5cc5d0e4d771dca3d1c4cf3dada59d097672
MD5 5c1b720ec28a3d4af24a19003fb56f50
SHA1 fa8c1236c3e7bc4d002be0abf5523659bf4c9af8
SHA512 178e4b5633b1c4d455555b394940d6b240dc4da22e621e6c91035870f3e275b25881ea712fc7b73a4e73d9d9376045834fb00b3d03454616d877ecd3cd91790c
SSDEEP 3072:JQT/QLtwugcvGMI9+x7alYjt8T/NOOZ/M5l/evBr+jL+0geRp:JE/QLXgSh7aSjtGZ/M5lP3ge
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

7249

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateJobObjectW SetComputerNameW CreateHardLinkA GetTickCount GetCommConfig VirtualFree GetConsoleAliasesLengthA GlobalFindAtomA LoadLibraryW SetConsoleMode SetComputerNameExW InterlockedExchange GetLastError SetLastError GetProcAddress VirtualAlloc BackupWrite WriteConsoleA GlobalSize LocalAlloc FindFirstVolumeMountPointW TransmitCommChar RemoveDirectoryW QueryDosDeviceW AddAtomA SetSystemTime GetThreadPriority GetModuleHandleA GetStringTypeW EnumResourceLanguagesW GetCurrentProcessId ResetWriteWatch SetFileAttributesW DeleteFileA lstrcpyA GetConsoleAliasA FindFirstChangeNotificationW WriteConsoleOutputCharacterW InterlockedExchangeAdd GetComputerNameA UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW HeapFree GetModuleHandleW Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess IsDebuggerPresent GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapCreate QueryPerformanceCounter GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage LeaveCriticalSection EnterCriticalSection HeapAlloc HeapReAlloc LoadLibraryA InitializeCriticalSectionAndSpinCount RtlUnwind LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetStringTypeA GetLocaleInfoA HeapSize RaiseException

gdi32

GetCharABCWidthsFloatA SetColorAdjustment

advapi32

AreAnyAccessesGranted

Sharing