51d535916ba8199ad544480b70b5a77e

General

Target
51d535916ba8199ad544480b70b5a77e
Size 13.1MB
Sample240110-2rth2ahfhp
SHA256 949e796eb71a8f934d95a05617c1a032fcbb8b46c59d61315773467b7c71d8b6
MD5 51d535916ba8199ad544480b70b5a77e
SHA1 37d432ab4eb74352093c01885bf2ef69f71d930a
SHA512 12167c124ff2439c95fac0ca7952d825d164b33b2f39318f2cedc50f86ee98b85f65e27d7037edfd180564a56a203f4b326e13535e47884a40f1b9b32461fb55
SSDEEP 393216:NmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmK:NmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmK
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
51d535916ba8199ad544480b70b5a77e

File Explorer

51d535916ba8199ad544480b70b5a77e

.exe 13.1MB

51d535916ba8199ad544480b70b5a77e

IMPHASH 213ce6a72c39868a010970b448621618
SHA256 949e796eb71a8f934d95a05617c1a032fcbb8b46c59d61315773467b7c71d8b6
MD5 51d535916ba8199ad544480b70b5a77e
SHA1 37d432ab4eb74352093c01885bf2ef69f71d930a
SHA512 12167c124ff2439c95fac0ca7952d825d164b33b2f39318f2cedc50f86ee98b85f65e27d7037edfd180564a56a203f4b326e13535e47884a40f1b9b32461fb55
SSDEEP 393216:NmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmK:NmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmK
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

68247

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasesLengthA GetTapePosition GetLongPathNameA GetUserDefaultLangID AddRefActCtx GetCPInfoExA WriteConsoleInputW ReadConsoleInputW GetTapeParameters WaitCommEvent GetNumaNodeProcessorMask GetConsoleCP VerifyVersionInfoA WaitNamedPipeW CreateMutexA WriteConsoleW GetLastError CreateFileA DeleteFileW WritePrivateProfileSectionA GetPrivateProfileSectionW GetLongPathNameW SetStdHandle LoadLibraryW IsDebuggerPresent FindFirstVolumeW WriteFile BuildCommDCBW FindActCtxSectionStringW VerLanguageNameW SetFileShortNameA WriteProcessMemory GetFileAttributesW OpenEventA SetEvent IsBadReadPtr Sleep WaitForSingleObject LoadResource EnumDateFormatsW FreeConsole SetConsoleCtrlHandler SetConsoleTitleW GetCurrentConsoleFont SetConsoleTextAttribute AttachConsole GetConsoleAliasesLengthW ReadConsoleA ReadConsoleOutputW GetSystemWindowsDirectoryW GetStringTypeW BuildCommDCBAndTimeoutsA HeapUnlock HeapLock GetAtomNameW HeapReAlloc HeapCompact GetGeoInfoW GetCurrentProcess GetProcAddress GetModuleHandleA CreateThread GetVersionExW GetOEMCP WaitForMultipleObjects VerifyVersionInfoW WriteConsoleOutputCharacterA LocalAlloc SetMailslotInfo GetCPInfoExW SetEnvironmentVariableW SetCalendarInfoA CommConfigDialogA GetConsoleWindow FindAtomW SetFileApisToOEM GetStringTypeA HeapSize GetDiskFreeSpaceA GetProfileIntA InterlockedPopEntrySList GetModuleHandleW ExitProcess UnhandledExceptionFilter SetUnhandledExceptionFilter GetCommandLineA GetStartupInfoA HeapAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement GetStdHandle GetModuleFileNameA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection TerminateProcess LoadLibraryA InitializeCriticalSectionAndSpinCount SetFilePointer SetHandleCount GetFileType FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime VirtualAlloc GetCPInfo GetACP IsValidCodePage RtlUnwind GetLocaleInfoA GetConsoleMode FlushFileBuffers MultiByteToWideChar LCMapStringA LCMapStringW WriteConsoleA GetConsoleOutputCP CloseHandle

gdi32

GetCharWidthFloatA

Sharing

General

Malware Config

Signatures

File Explorer

51d535916ba8199ad544480b70b5a77e

kernel32

gdi32

generic