5323d40028842db944f21192878a9de2

General

Target
5323d40028842db944f21192878a9de2
Size 282KB
Sample240111-leew4sdccj
SHA256 7b994fd4ba2c99f961e60a9a452a12504f6fdad2f05e35651a71bbb4faf93fc0
MD5 5323d40028842db944f21192878a9de2
SHA1 cb89da1bb367585e388d394e7191aca166a0553a
SHA512 e9598243e5411634e497a784fdeb201d25de4ac8ec31816ba841c03e9f4c538bcd114512c96a2efc2309420e69f33e0247dbad6a1e08b42bd968b8bae77c0456
SSDEEP 6144://ncdFrNqHKAe53jlns2AgWCHHnbf7q7n0YqBAyQ:E1NqqAepls2AcHbu7eBAyQ
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5323d40028842db944f21192878a9de2

File Explorer

5323d40028842db944f21192878a9de2

.exe 282KB

5323d40028842db944f21192878a9de2

IMPHASH f841f9dee1a38a44fd841e38a1e2026e
SHA256 7b994fd4ba2c99f961e60a9a452a12504f6fdad2f05e35651a71bbb4faf93fc0
MD5 5323d40028842db944f21192878a9de2
SHA1 cb89da1bb367585e388d394e7191aca166a0553a
SHA512 e9598243e5411634e497a784fdeb201d25de4ac8ec31816ba841c03e9f4c538bcd114512c96a2efc2309420e69f33e0247dbad6a1e08b42bd968b8bae77c0456
SSDEEP 6144://ncdFrNqHKAe53jlns2AgWCHHnbf7q7n0YqBAyQ:E1NqqAepls2AcHbu7eBAyQ
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

12032

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommandLineW EnumResourceNamesW lstrlenA GetStringTypeA InterlockedIncrement GetQueuedCompletionStatus ReadConsoleA GlobalLock FreeEnvironmentStringsA GetModuleHandleW GetPrivateProfileStringW WriteFile SetCommState GlobalAlloc LoadLibraryW CopyFileW GetSystemWindowsDirectoryA GetConsoleAliasExesLengthW GlobalFlags GetExitCodeProcess IsDBCSLeadByte ReadFile GetNamedPipeHandleStateW LCMapStringA GetPrivateProfileIntW InterlockedExchange GetStartupInfoA GetLastError ReadConsoleOutputCharacterA GetProcAddress VirtualAlloc GetPrivateProfileStringA OpenWaitableTimerA LoadLibraryA GetFileType SetCurrentDirectoryW HeapWalk Process32NextW CreateIoCompletionPort QueryMemoryResourceNotification GetCPInfoExA SetThreadAffinityMask TlsAlloc FindAtomW DeleteFileW GetSystemTime CopyFileExA InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection MultiByteToWideChar GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter GetModuleFileNameW HeapValidate IsBadReadPtr RaiseException RtlUnwind TerminateProcess GetCurrentProcess IsDebuggerPresent GetACP GetOEMCP GetCPInfo IsValidCodePage TlsGetValue TlsSetValue GetCurrentThreadId TlsFree SetLastError QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime ExitProcess FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetStdHandle HeapDestroy HeapCreate HeapFree VirtualFree GetModuleFileNameA FlushFileBuffers WideCharToMultiByte GetConsoleCP GetConsoleMode DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW HeapAlloc HeapSize HeapReAlloc InitializeCriticalSectionAndSpinCount LCMapStringW GetStringTypeW GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP SetFilePointer CloseHandle CreateFileA

user32

GetComboBoxInfo

winhttp

WinHttpOpen

Sharing

General

Malware Config

Signatures

File Explorer

5323d40028842db944f21192878a9de2

kernel32

user32

winhttp

generic