4a5abd19a0053d5c117a147260b3464c

Sharing

Copy URL Twitter E-mail

General

Target
4a5abd19a0053d5c117a147260b3464c
Size 19.7MB
Sample240108-ebnaraaeem
SHA256 cfc3fa62f4876729e7974c4bcea136ef71b82a13ca8b943323b22ca91dcebd19
MD5 4a5abd19a0053d5c117a147260b3464c
SHA1 44da672ec92fdca7019e2ddf23e58a1f693ba45d
SHA512 69e3c75d6996d6336f1ed9a5742469d98577dd14e8452865b3648f4cf4a6ce510aee1a29e78d86989e2ccee0e80b3f3cf9f7cb7d003367c4de03d6b0330bff4e
SSDEEP 393216:PN3eETMN7WKazmx+GhgQDR16g07o4mrDOPb2ejhrtIE6vvKpuFAnjtVSO:PN3eETMN7j7x+8J6g0U48DOj2KkE6vyH
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a5abd19a0053d5c117a147260b3464c

File Explorer

4a5abd19a0053d5c117a147260b3464c

.exe 19.7MB

4a5abd19a0053d5c117a147260b3464c

IMPHASH cdf2338385bbf26ec9ce2289fc7f2d64
SHA256 cfc3fa62f4876729e7974c4bcea136ef71b82a13ca8b943323b22ca91dcebd19
MD5 4a5abd19a0053d5c117a147260b3464c
SHA1 44da672ec92fdca7019e2ddf23e58a1f693ba45d
SHA512 69e3c75d6996d6336f1ed9a5742469d98577dd14e8452865b3648f4cf4a6ce510aee1a29e78d86989e2ccee0e80b3f3cf9f7cb7d003367c4de03d6b0330bff4e
SSDEEP 393216:PN3eETMN7WKazmx+GhgQDR16g07o4mrDOPb2ejhrtIE6vvKpuFAnjtVSO:PN3eETMN7j7x+8J6g0U48DOj2KkE6vyH
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

489257

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

comctl32

ord17

winmm

timeBeginPeriod joyGetDevCapsW joyGetPosEx timeEndPeriod

kernel32

GetTempFileNameW GlobalAddAtomW GlobalDeleteAtom GetModuleHandleW lstrlenW GetLocaleInfoA LockResource VirtualProtect VirtualQuery SetLastError LoadResource SizeofResource FindResourceA FindResourceW IsBadReadPtr IsBadWritePtr FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA FindNextFileA FindFirstFileExA GetProcessHeap DecodePointer GetFileType LCMapStringW EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetOEMCP IsValidCodePage GetStringTypeW GetCPInfo HeapFree GlobalFree HeapAlloc GetStdHandle GetModuleFileNameA GetModuleHandleExW ExitProcess HeapSize HeapCompact SetEnvironmentVariableW DeleteFileW GetACP LoadLibraryExW DeleteCriticalSection LeaveCriticalSection EnterCriticalSection EncodePointer RtlUnwind InitializeSListHead GetCurrentProcessId GetStartupInfoW IsDebuggerPresent IsProcessorFeaturePresent TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter UnhandledExceptionFilter GetSystemTimeAsFileTime TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount QueryPerformanceFrequency QueryPerformanceCounter LoadLibraryExA GetSystemInfo RaiseException FileTimeToSystemTime FileTimeToLocalFileTime GetSystemTime GetVersion GetTempPathW FindClose FindNextFileW FindFirstFileW GetCurrentDirectoryW SetErrorMode GlobalUnlock GlobalLock GlobalAlloc GetExitCodeProcess GetCommandLineW WideCharToMultiByte Sleep SetCurrentDirectoryW CreateDirectoryW CloseHandle SetFilePointer WriteFile GetLastError ReadFile CreateFileW GetCurrentThreadId RemoveDirectoryW GetVersionExW GetModuleFileNameW WriteConsoleW GetLocaleInfoW MultiByteToWideChar FreeLibrary GetProcAddress LoadLibraryW SetStdHandle GetConsoleCP GetConsoleMode SetFilePointerEx FlushFileBuffers HeapReAlloc

user32

SystemParametersInfoW DrawEdge DrawTextW PostQuitMessage IntersectRect SetRect DrawFocusRect InvertRect CreateDialogParamA CreateDialogParamW CreateDialogIndirectParamA CreateDialogIndirectParamW DialogBoxParamA DialogBoxIndirectParamA DialogBoxIndirectParamW LoadMenuA LoadMenuW LoadStringA SetLastErrorEx GetTabbedTextExtentW GetUpdateRect IsIconic DefMDIChildProcW SetDlgItemTextW EndPaint BeginPaint PtInRect GetDlgItem MapVirtualKeyW ModifyMenuW GetDlgItemTextW EndDialog DrawMenuBar DestroyMenu LoadMenuIndirectW GetMenuItemCount SetWindowPlacement GetWindowPlacement GetFocus CallWindowProcW RemovePropW SetPropW GetPropW UnionRect DestroyWindow SetScrollPos SetScrollRange CreateWindowExW GetParent EndDeferWindowPos DeferWindowPos BeginDeferWindowPos SetFocus GetSysColor GetDesktopWindow RedrawWindow GetSystemMenu UpdateWindow SetWindowLongW MessageBoxW GetMenuStringW GetMenuItemID GetInputState FillRect LoadStringW DialogBoxParamW RegisterClassW RegisterClassExW LoadImageW LoadIconW GetWindow GetClassNameW GetTopWindow GetMonitorInfoW MonitorFromWindow GetSystemMetrics OemToCharA GetAsyncKeyState GetActiveWindow ShowCursor SetCapture ReleaseCapture GetKeyState GetWindowRect MapWindowPoints SetWindowPos IsZoomed GetWindowLongW AdjustWindowRectEx SendMessageW LockWindowUpdate IsWindowVisible GetClientRect SetWindowTextW IsDialogMessageW SetTimer GetClipboardData CloseClipboard SetClipboardData EmptyClipboard OpenClipboard IsClipboardFormatAvailable wsprintfW ShowWindow PostMessageW CheckMenuItem EnableMenuItem GetMenu InvalidateRect SetCursorPos ClientToScreen ScreenToClient GetCursorPos GetKeyboardState CopyRect UnhookWindowsHookEx KillTimer SetWindowsHookExW CallNextHookEx DestroyIcon GetSubMenu DeleteMenu GetMenuState LoadCursorW SetCursor ReleaseDC CreateIconIndirect GetDC MsgWaitForMultipleObjects DispatchMessageW TranslateMessage TranslateMDISysAccel GetMessageW PeekMessageW SendDlgItemMessageW

gdi32

CreatePalette GetDeviceCaps SelectPalette RealizePalette GetObjectW CreateFontIndirectW CreatePen Rectangle SelectObject MoveToEx LineTo CreateSolidBrush GetStockObject SetTextColor SetBkMode DeleteObject GetClipRgn ExcludeClipRect SelectClipRgn GetTextExtentPointW GetCharWidthW DPtoLP SetTextAlign SetROP2 LPtoDP SetBkColor Polygon TextOutW SetPolyFillMode GetTextMetricsW GetNearestPaletteIndex CreateHatchBrush SetDIBits CreateCompatibleBitmap CreateRectRgn CreateBitmap

comdlg32

GetSaveFileNameW GetOpenFileNameW

shell32

ShellExecuteExW DragAcceptFiles DragQueryFileW

Sharing

General

Malware Config

Signatures

File Explorer

4a5abd19a0053d5c117a147260b3464c

comctl32

winmm

kernel32

user32

gdi32

comdlg32

shell32

generic