528785c4b432b56e5981a04c02cd9196

General

Target
528785c4b432b56e5981a04c02cd9196
Size 324KB
Sample240111-e2fzcseeel
SHA256 3d26d7945dfd585794694aad848b1f47e1cb538a2926f49eb06752de44cba8c0
MD5 528785c4b432b56e5981a04c02cd9196
SHA1 0cd589f194ce10afb22414c0da7c098e02317fca
SHA512 612635fa4b7307e1417070254a0df54b4b8f1775e839a59f30b0a35963c9ffc2b2afbc8d087947e014b10204d61cb68da3fdd9698794f05fc820f61d1d710d1e
SSDEEP 6144:1klWoo9zHeW6bL4G+105jK5Q5eLRriDvIY:jB9zHI0G+1OD5eLRriDvv
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
528785c4b432b56e5981a04c02cd9196

File Explorer

528785c4b432b56e5981a04c02cd9196

.exe 324KB

528785c4b432b56e5981a04c02cd9196

IMPHASH d2c278e11acb1e17db95739ca9dcf6f7
SHA256 3d26d7945dfd585794694aad848b1f47e1cb538a2926f49eb06752de44cba8c0
MD5 528785c4b432b56e5981a04c02cd9196
SHA1 0cd589f194ce10afb22414c0da7c098e02317fca
SHA512 612635fa4b7307e1417070254a0df54b4b8f1775e839a59f30b0a35963c9ffc2b2afbc8d087947e014b10204d61cb68da3fdd9698794f05fc820f61d1d710d1e
SSDEEP 6144:1klWoo9zHeW6bL4G+105jK5Q5eLRriDvIY:jB9zHI0G+1OD5eLRriDvv
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

7424

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetPriorityClass GetNativeSystemInfo WriteConsoleInputW SetFilePointer CopyFileExW SetLocalTime InterlockedIncrement InterlockedDecrement WaitNamedPipeA CreateDirectoryW SetComputerNameW GetComputerNameW FreeEnvironmentStringsA CreateNamedPipeW VirtualFree GetConsoleAliasesLengthA GetPrivateProfileStringW FindResourceExA GlobalAlloc LoadLibraryW GetThreadSelectorEntry GetConsoleAliasExesLengthW InitAtomTable CreateSemaphoreA SetConsoleCursorPosition GetFileAttributesW GetBinaryTypeA GetSystemDirectoryA GetOverlappedResult CompareStringW EnumResourceNamesW GlobalUnlock ReleaseActCtx GetFileSizeEx GetStartupInfoA OpenMutexW GetHandleInformation GetProcAddress GetProcessHeaps ReadFileEx DisableThreadLibraryCalls ResetEvent LoadLibraryA GetConsoleScreenBufferInfo SetCurrentDirectoryW PostQueuedCompletionStatus WriteProfileSectionW SetEnvironmentVariableA WriteProfileStringA CreateIoCompletionPort GetCurrentDirectoryA FatalAppExitA GetCurrentThreadId GetCPInfoExA GetVersionExA TlsAlloc FindAtomW DeleteFileW UnregisterWaitEx LCMapStringW AreFileApisANSI lstrlenW FileTimeToDosDateTime FlushFileBuffers UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError MoveFileA GetStartupInfoW HeapValidate IsBadReadPtr RaiseException GetModuleHandleW Sleep ExitProcess GetModuleFileNameA WriteFile GetStdHandle TerminateProcess GetCurrentProcess IsDebuggerPresent GetModuleFileNameW RtlUnwind GetACP GetOEMCP GetCPInfo IsValidCodePage TlsGetValue TlsSetValue TlsFree SetLastError DeleteCriticalSection EnterCriticalSection LeaveCriticalSection QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType HeapDestroy HeapCreate HeapFree HeapAlloc HeapSize HeapReAlloc VirtualAlloc InitializeCriticalSectionAndSpinCount MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW WideCharToMultiByte LCMapStringA GetModuleHandleA GetConsoleCP GetConsoleMode SetStdHandle WriteConsoleA GetConsoleOutputCP CreateFileA CloseHandle

gdi32

GetCharWidthA

winhttp

WinHttpOpen

Sharing

General

Malware Config

Signatures

File Explorer

528785c4b432b56e5981a04c02cd9196

kernel32

gdi32

winhttp

generic