4a575119119b826fd764c1f85bedc66d

General

Target
4a575119119b826fd764c1f85bedc66d
Size 44KB
Sample240108-d79m7aaean
SHA256 b7c89d5e1f54723b87d130e27993aa7ea706130548f1044c2efd96160d9a12fa
MD5 4a575119119b826fd764c1f85bedc66d
SHA1 f4ec3684eacd65a7cc88710625ad4d18d01cf9ca
SHA512 ffccfa845efd181f6fdb53c2fbfffeb4d1276346ec9b91aed3de86bef9568957721ef502061fba7750f4d3ed72f70bf954714c10ff9f1ce1a9c53f19a1e6ee43
SSDEEP 768:Bo1wBS/iAPx9my5ztoWp893vb53XvoDKTz:Bo1wB2iAPxiWp89FPo6z
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a575119119b826fd764c1f85bedc66d

File Explorer

4a575119119b826fd764c1f85bedc66d

.exe 44KB

4a575119119b826fd764c1f85bedc66d

IMPHASH 272e9c83d0e9ebd446f586da8452fc81
SHA256 b7c89d5e1f54723b87d130e27993aa7ea706130548f1044c2efd96160d9a12fa
MD5 4a575119119b826fd764c1f85bedc66d
SHA1 f4ec3684eacd65a7cc88710625ad4d18d01cf9ca
SHA512 ffccfa845efd181f6fdb53c2fbfffeb4d1276346ec9b91aed3de86bef9568957721ef502061fba7750f4d3ed72f70bf954714c10ff9f1ce1a9c53f19a1e6ee43
SSDEEP 768:Bo1wBS/iAPx9my5ztoWp893vb53XvoDKTz:Bo1wB2iAPxiWp89FPo6z
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

14267

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WinExec CopyFileA GetModuleFileNameA GetCurrentProcessId GetProcAddress LoadLibraryA GetLocalTime GetStringTypeW CreateDirectoryA LCMapStringW LCMapStringA MultiByteToWideChar SetStdHandle SetFilePointer ReadFile SetEndOfFile GetOEMCP GetACP GetCPInfo GetWindowsDirectoryA DeleteFileA Sleep OpenProcess GetStringTypeA ReadProcessMemory CreateFileA CloseHandle GetLastError HeapReAlloc VirtualAlloc WriteFile RtlUnwind VirtualFree HeapCreate GetModuleHandleA GetStartupInfoA GetCommandLineA GetVersion ExitProcess HeapFree HeapAlloc TerminateProcess GetCurrentProcess UnhandledExceptionFilter FreeEnvironmentStringsA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStrings GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType HeapDestroy FlushFileBuffers

user32

GetWindowThreadProcessId FindWindowA MessageBoxA DefWindowProcA DestroyWindow DispatchMessageA TranslateMessage PeekMessageA CreateWindowExA LoadCursorA RegisterClassA

advapi32

RegSetValueExA RegCloseKey RegOpenKeyExA RegQueryValueExA RegDeleteValueA

wsock32

send recv closesocket htons WSAStartup gethostbyname ioctlsocket connect socket

Sharing

General

Malware Config

Signatures

File Explorer

4a575119119b826fd764c1f85bedc66d

kernel32

user32

advapi32

wsock32

generic