504c8c6aa99a0b7413a5873f8863b729

General

Target
504c8c6aa99a0b7413a5873f8863b729
Size 961KB
Sample240110-mdl5gaedf8
SHA256 202307bbcf24505589a92fbd02fdb6c943f4e5c498e0f23ce2fc679ac28ab188
MD5 504c8c6aa99a0b7413a5873f8863b729
SHA1 ccad8b1f8e2d1e8753e64a38cf0e740ac6015db8
SHA512 fae78db5d79bbd6aa2776b0213e316bc9cf002136959d2d3363927b5ef4d2c99e2fbece637599bec2b46a7509e5865f50aa54d699a4f988b4d1f5c653a5d4a75
SSDEEP 24576:+HpJttkBA0cEMSLOqsbXiFRgqpzn7Uy8iH/a/W9AP3sodTIj2eQ:+JJttk2vKKbXe6Y9piiScobp
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
504c8c6aa99a0b7413a5873f8863b729

File Explorer

504c8c6aa99a0b7413a5873f8863b729

.exe 961KB

504c8c6aa99a0b7413a5873f8863b729

IMPHASH 6d0aaf568d2407e4cb1a603b1598cc11
SHA256 202307bbcf24505589a92fbd02fdb6c943f4e5c498e0f23ce2fc679ac28ab188
MD5 504c8c6aa99a0b7413a5873f8863b729
SHA1 ccad8b1f8e2d1e8753e64a38cf0e740ac6015db8
SHA512 fae78db5d79bbd6aa2776b0213e316bc9cf002136959d2d3363927b5ef4d2c99e2fbece637599bec2b46a7509e5865f50aa54d699a4f988b4d1f5c653a5d4a75
SSDEEP 24576:+HpJttkBA0cEMSLOqsbXiFRgqpzn7Uy8iH/a/W9AP3sodTIj2eQ:+JJttk2vKKbXe6Y9piiScobp
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

95499

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFileSize CloseHandle UnmapViewOfFile LoadLibraryA GetModuleHandleA InterlockedIncrement InterlockedDecrement GetProcAddress VirtualFree GetLastError GetModuleHandleExW IsBadReadPtr GetEnvironmentVariableW GetCurrentDirectoryW GetFullPathNameW GetFileAttributesExW LeaveCriticalSection DeleteCriticalSection WaitForSingleObject Sleep SetLastError WriteFile DeleteFileA HeapReAlloc OpenProcess GetCurrentProcess ExitProcess TerminateProcess SetUnhandledExceptionFilter GetProcessId DuplicateHandle GetLocalTime SystemTimeToFileTime GetTickCount CreateProcessW GetTempPathA GetTempFileNameA MoveFileExA AddVectoredExceptionHandler GetCurrentProcessId GetCurrentThread GetThreadContext FindClose GetCurrentDirectoryA CreateDirectoryA RemoveDirectoryA GetFileAttributesA MultiByteToWideChar WideCharToMultiByte CreateFileW WriteConsoleW EnterCriticalSection GetProcessHeap HeapFree HeapAlloc FreeLibrary InterlockedCompareExchange FlushFileBuffers SetStdHandle RaiseException RtlUnwind GetCurrentThreadId LoadLibraryExW GetCommandLineA InitializeCriticalSectionAndSpinCount UnhandledExceptionFilter TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetModuleHandleW GetStdHandle GetModuleFileNameW IsProcessorFeaturePresent HeapSize IsDebuggerPresent VirtualQuery IsValidCodePage GetACP GetOEMCP GetCPInfo GetConsoleMode SetFilePointerEx GetFileType GetModuleFileNameA QueryPerformanceCounter GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW OutputDebugStringW LoadLibraryW LCMapStringW GetConsoleCP GetStringTypeW

user32

MessageBoxA

advapi32

RegOpenKeyExA RegCloseKey LookupPrivilegeValueA AdjustTokenPrivileges OpenProcessToken RegQueryValueExA

shell32

ShellExecuteExW

Sharing

General

Malware Config

Signatures

File Explorer

504c8c6aa99a0b7413a5873f8863b729

kernel32

user32

advapi32

shell32

generic