58c8b9e8d891ee5527394759dc0f33f5

General

Target
58c8b9e8d891ee5527394759dc0f33f5
Size 688KB
Sample240113-nc2zzahhd7
SHA256 0dbb33b5aaa39d7e5b04eb88bbc5e8602e2ebfa84b3cb26ea4c70d6ef4c32b1e
MD5 58c8b9e8d891ee5527394759dc0f33f5
SHA1 e4f3a7d684d781ce244b08b0a2bfa8210c7c9c11
SHA512 c5a64ee34df5c69b9d58f9eb554fa7c5173916bbc8bfe0085fb2f844fc5a584c99f260d56c8bd2c34f2b8b7a237161315d0c9b76dc718c0b7a2801a907913b90
SSDEEP 12288:PjSMjSgO+B0QIk5d+KjL25foGXo33KZRPCb2t9VAtVOvVC11lc:rSM2gO+B0QQKjK5gGXoqZRPPtAGVC
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
58c8b9e8d891ee5527394759dc0f33f5

File Explorer

58c8b9e8d891ee5527394759dc0f33f5

.exe 688KB

58c8b9e8d891ee5527394759dc0f33f5

IMPHASH 0336658842541b9e17744ccc2800922a
SHA256 0dbb33b5aaa39d7e5b04eb88bbc5e8602e2ebfa84b3cb26ea4c70d6ef4c32b1e
MD5 58c8b9e8d891ee5527394759dc0f33f5
SHA1 e4f3a7d684d781ce244b08b0a2bfa8210c7c9c11
SHA512 c5a64ee34df5c69b9d58f9eb554fa7c5173916bbc8bfe0085fb2f844fc5a584c99f260d56c8bd2c34f2b8b7a237161315d0c9b76dc718c0b7a2801a907913b90
SSDEEP 12288:PjSMjSgO+B0QIk5d+KjL25foGXo33KZRPCb2t9VAtVOvVC11lc:rSM2gO+B0QQKjK5gGXoqZRPPtAGVC
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

10723

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

lstrlenA GetCPInfo GetDefaultCommConfigW HeapAlloc _lwrite InterlockedDecrement GetCurrentProcess GetSystemWindowsDirectoryW GetUserDefaultLCID SetConsoleScreenBufferSize SetVolumeMountPointW GetCommandLineA GetEnvironmentStrings ReadConsoleInputA WriteConsoleOutputA GetVersionExW GetComputerNameExA lstrcpynW GetFileAttributesW LocalReAlloc CreateTimerQueue ReadFile GetModuleFileNameW GetCPInfoExW ChangeTimerQueueTimer GetProcAddress AttachConsole PeekConsoleInputW VerLanguageNameA FreeUserPhysicalPages GetLocalTime LoadLibraryA BeginUpdateResourceA GetCurrentConsoleFont SetEnvironmentVariableA GetConsoleTitleW BuildCommDCBA VirtualProtect FindFirstVolumeA ReleaseMutex GetVersion AddConsoleAliasA EnumCalendarInfoExA LCMapStringW CreateThread CreateFileA SetStdHandle HeapQueryInformation GetSystemDefaultLangID WriteConsoleW GetConsoleOutputCP InterlockedIncrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree TerminateProcess IsDebuggerPresent GetModuleHandleW ExitProcess GetStartupInfoA RtlUnwind RaiseException LCMapStringA WideCharToMultiByte MultiByteToWideChar WriteFile GetStdHandle GetModuleFileNameA HeapCreate VirtualFree VirtualAlloc HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetACP GetOEMCP IsValidCodePage GetLocaleInfoA GetStringTypeA GetStringTypeW GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA

user32

RealGetWindowClassA GetCaretPos

Sharing

General

Malware Config

Signatures

File Explorer

58c8b9e8d891ee5527394759dc0f33f5

kernel32

user32

generic