573bc9bb0f24ff5046e164f2139777f6

General

Target
573bc9bb0f24ff5046e164f2139777f6
Size 176KB
Sample240112-xjbwssecf2
SHA256 4170bbfd45d3db9b8337b1259e3bdc33840201b6c8ba1f69efa65ac41020445f
MD5 573bc9bb0f24ff5046e164f2139777f6
SHA1 830d567fc9217e49a7066fdf0e8fe68fc757c3fe
SHA512 87d41132b0ed6907b5918a9b250135cef95cc9619ca359f8d1b97e053144844c63c3385f573081a2ca3d4a2d7ad1c84582e40ef10d74351c5d34dd9c1a96c1bb
SSDEEP 3072:BxHN34Oql/K1+rQ5BSwAINelRHwhZoWC9sI5/DuT61m:B5NInhrMGICHwhZU9sI5/
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
573bc9bb0f24ff5046e164f2139777f6

File Explorer

573bc9bb0f24ff5046e164f2139777f6

.exe 176KB

573bc9bb0f24ff5046e164f2139777f6

IMPHASH 915c33ea178f4e014c52a0e08d0a2d56
SHA256 4170bbfd45d3db9b8337b1259e3bdc33840201b6c8ba1f69efa65ac41020445f
MD5 573bc9bb0f24ff5046e164f2139777f6
SHA1 830d567fc9217e49a7066fdf0e8fe68fc757c3fe
SHA512 87d41132b0ed6907b5918a9b250135cef95cc9619ca359f8d1b97e053144844c63c3385f573081a2ca3d4a2d7ad1c84582e40ef10d74351c5d34dd9c1a96c1bb
SSDEEP 3072:BxHN34Oql/K1+rQ5BSwAINelRHwhZoWC9sI5/DuT61m:B5NInhrMGICHwhZU9sI5/
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

10094

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateTimerQueue WriteConsoleOutputCharacterW EnumDateFormatsExW GetDefaultCommConfigW HeapAlloc _lwrite InterlockedDecrement GetCurrentProcess SetEnvironmentVariableW GetUserDefaultLCID SetConsoleScreenBufferSize SetVolumeMountPointW GetModuleHandleW EnumCalendarInfoExW GetConsoleAliasesLengthA GetEnvironmentStrings GetConsoleCP ReadConsoleInputA GetSystemWindowsDirectoryA WriteConsoleOutputA GetFileAttributesA GetComputerNameExA lstrcpynW LocalReAlloc HeapQueryInformation IsBadWritePtr GetMailslotInfo GetVolumeNameForVolumeMountPointA GetTimeZoneInformation lstrlenW GetConsoleOutputCP InterlockedExchange GetLastError ChangeTimerQueueTimer SetLastError GetProcAddress PeekConsoleInputW BeginUpdateResourceW RemoveDirectoryA EnterCriticalSection ResetEvent GetLocalTime LoadLibraryA OpenMutexA WriteConsoleA SetCalendarInfoW GlobalGetAtomNameW SetEnvironmentVariableA GetModuleFileNameA GetOEMCP GetConsoleTitleW BuildCommDCBA VirtualProtect FindFirstVolumeA ReleaseMutex GetCurrentProcessId GetConsoleProcessList CreateFileA ReadFile GetSystemDefaultLangID SetStdHandle WriteConsoleW UnhandledExceptionFilter SetUnhandledExceptionFilter Sleep ExitProcess GetCommandLineA GetStartupInfoA RaiseException RtlUnwind WriteFile GetStdHandle TerminateProcess IsDebuggerPresent HeapFree DeleteCriticalSection LeaveCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetCPInfo GetACP IsValidCodePage HeapSize GetLocaleInfoA GetConsoleMode FlushFileBuffers LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW SetFilePointer CloseHandle

user32

RealGetWindowClassA

Sharing

General

Malware Config

Signatures

File Explorer

573bc9bb0f24ff5046e164f2139777f6

kernel32

user32

generic