572c582f30cc0581663158d145c17326

General

Target
572c582f30cc0581663158d145c17326
Size 756KB
Sample240112-w129msdbgp
SHA256 6ba93504015e56bfef38d598f346f85f907829cdaae96cdd2ae07177457e1420
MD5 572c582f30cc0581663158d145c17326
SHA1 1cebe746cfb3ec8d101618676c91911e0a673082
SHA512 f0a794e6454d59bcd54da3e982411b5973060b3baa672a5235f775f4f30b58f3c6d88bf8ba7501d01c35b7486279e2d1f4a40f2704676de570a833de61d42dcf
SSDEEP 12288:LW3CqXCqxfQkDB6rcoy8nUZry5Gx9mrwMywXNiwSfJEtKuARwoOeaw:S3CwfzF6Ij+UZrH9I9ywXgwVtH29a
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
572c582f30cc0581663158d145c17326

File Explorer

572c582f30cc0581663158d145c17326

.exe 756KB

572c582f30cc0581663158d145c17326

IMPHASH 3e335ab1bd48187462dff6eb1356956c
SHA256 6ba93504015e56bfef38d598f346f85f907829cdaae96cdd2ae07177457e1420
MD5 572c582f30cc0581663158d145c17326
SHA1 1cebe746cfb3ec8d101618676c91911e0a673082
SHA512 f0a794e6454d59bcd54da3e982411b5973060b3baa672a5235f775f4f30b58f3c6d88bf8ba7501d01c35b7486279e2d1f4a40f2704676de570a833de61d42dcf
SSDEEP 12288:LW3CqXCqxfQkDB6rcoy8nUZry5Gx9mrwMywXNiwSfJEtKuARwoOeaw:S3CwfzF6Ij+UZrH9I9ywXgwVtH29a
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

616839

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnterCriticalSection GetConsoleAliasesLengthA InterlockedExchangeAdd CreateTapePartition GetSystemDefaultLCID CreateActCtxA GetCPInfoExW WriteConsoleInputW ReadConsoleInputW InterlockedPopEntrySList SetConsoleDisplayMode WriteConsoleA GetConsoleCP VerifyVersionInfoW CreateFileW WritePrivateProfileSectionW GetPrivateProfileSectionA EnumDateFormatsExA CancelTimerQueueTimer LoadLibraryA FlushInstructionCache SetConsoleCP FindFirstVolumeA ReadFile BuildCommDCBW VerLanguageNameW SetFileApisToANSI WriteProcessMemory LeaveCriticalSection SetEvent GetExitCodeThread EndUpdateResourceA GetCPInfoExA GetLastError UpdateResourceA SetConsoleTitleW FindClose LoadLibraryExA CopyFileW ReadConsoleA ZombifyActCtx AddRefActCtx HeapUnlock DnsHostnameToComputerNameA ReadConsoleOutputW GlobalFindAtomW GetSystemWindowsDirectoryW GetUserDefaultLCID BuildCommDCBAndTimeoutsA IsWow64Process UnmapViewOfFile GetAtomNameW HeapSize GetGeoInfoA GetCurrentProcess VirtualProtect GetProcAddress GetModuleHandleA CreateThread GetVersionExW GetProcessAffinityMask WaitForSingleObject SetConsoleCursorInfo VerifyVersionInfoA WriteConsoleOutputCharacterA GetFileAttributesExW GetComputerNameA CommConfigDialogW GetConsoleAliasA GetSystemTimeAsFileTime GetDiskFreeSpaceW InterlockedIncrement InterlockedDecrement Sleep InitializeCriticalSection DeleteCriticalSection RaiseException RtlUnwind HeapReAlloc HeapAlloc GetCommandLineA GetStartupInfoA UnhandledExceptionFilter SetUnhandledExceptionFilter HeapFree TerminateProcess IsDebuggerPresent GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId SetHandleCount GetStdHandle GetFileType SetFilePointer HeapCreate VirtualFree VirtualAlloc ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW InitializeCriticalSectionAndSpinCount SetStdHandle GetConsoleMode FlushFileBuffers LCMapStringA LCMapStringW GetConsoleOutputCP WriteConsoleW CloseHandle CreateFileA

user32

GetAltTabInfoA RealChildWindowFromPoint

Sharing

General

Malware Config

Signatures

File Explorer

572c582f30cc0581663158d145c17326

kernel32

user32

generic