598ef8cb1757ecc051b9f6aa3379b066

General

Target
598ef8cb1757ecc051b9f6aa3379b066
Size 709KB
Sample240113-19yp2agbd4
SHA256 7ddee6868f075c48a3765f1b329e44d4cf97145a11a52c57d959d0fb19b10eaf
MD5 598ef8cb1757ecc051b9f6aa3379b066
SHA1 dd73c539f880c5281a8235d2534748a8046bce76
SHA512 b867cbc3cd9670d3d12fc6039d3b1c3a8cbc53dce4e7e1330a33b407852071fc4954406ab937e2257cac60b85e0bb2c8fd86a18ee188aa81488b4aa81366f5a9
SSDEEP 12288:bLmhK2Bvzjj45AAZCA+ZwjDIQ3SOP9vL+IuUrha4+Z1r4/uIwwdZNz/y:ehK2O5xZCA+SIQ3SOPkF1r20wdZNzK
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
598ef8cb1757ecc051b9f6aa3379b066

File Explorer

598ef8cb1757ecc051b9f6aa3379b066

.exe 709KB

598ef8cb1757ecc051b9f6aa3379b066

IMPHASH cd5c28f44b3cca36a31a3422b8479df9
SHA256 7ddee6868f075c48a3765f1b329e44d4cf97145a11a52c57d959d0fb19b10eaf
MD5 598ef8cb1757ecc051b9f6aa3379b066
SHA1 dd73c539f880c5281a8235d2534748a8046bce76
SHA512 b867cbc3cd9670d3d12fc6039d3b1c3a8cbc53dce4e7e1330a33b407852071fc4954406ab937e2257cac60b85e0bb2c8fd86a18ee188aa81488b4aa81366f5a9
SSDEEP 12288:bLmhK2Bvzjj45AAZCA+ZwjDIQ3SOP9vL+IuUrha4+Z1r4/uIwwdZNz/y:ehK2O5xZCA+SIQ3SOPkF1r20wdZNzK
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

7580

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumDateFormatsExW MoveFileExA EndUpdateResourceW InterlockedIncrement GetConsoleAliasA InterlockedDecrement ReadConsoleOutputAttribute GetSystemWindowsDirectoryW GetEnvironmentStringsW GetUserDefaultLCID WaitForSingleObject SetConsoleScreenBufferSize GetComputerNameW SetEvent GetConsoleAliasesLengthA ReadConsoleOutputA CreateActCtxW GetConsoleCP LocalShrink GetVersionExW GetFileAttributesA lstrcpynW VerifyVersionInfoA WriteConsoleW WritePrivateProfileSectionW IsBadWritePtr GetModuleFileNameW GetCompressedFileSizeA GetSystemDirectoryA lstrcatA GetACP GetVolumePathNameA lstrlenW SetConsoleTitleA FlushFileBuffers InterlockedExchange GetLastError GetProcAddress BeginUpdateResourceW LocalLock EnterCriticalSection GetLocalTime GetProcessId LocalAlloc SetCalendarInfoW DnsHostnameToComputerNameA CreateTapePartition SetConsoleDisplayMode SetFileApisToANSI GlobalGetAtomNameW SetEnvironmentVariableA GetModuleHandleA CancelTimerQueueTimer GetConsoleTitleW BuildCommDCBA VirtualProtect PeekConsoleInputA FindFirstVolumeW CreateFileA CreateFileW GetSystemDefaultLangID GetStartupInfoW HeapAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapFree CloseHandle TerminateProcess GetCurrentProcess IsDebuggerPresent LeaveCriticalSection Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException VirtualAlloc HeapReAlloc GetCPInfo GetOEMCP IsValidCodePage RtlUnwind SetStdHandle WideCharToMultiByte GetConsoleMode LoadLibraryA InitializeCriticalSectionAndSpinCount GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW WriteConsoleA GetConsoleOutputCP SetFilePointer HeapSize

user32

RealGetWindowClassA

advapi32

AdjustTokenPrivileges

Sharing

General

Malware Config

Signatures

File Explorer

598ef8cb1757ecc051b9f6aa3379b066

kernel32

user32

advapi32

generic