5a477a75b75da83db604c89a6d0a087d

General

Target
5a477a75b75da83db604c89a6d0a087d
Size 610KB
Sample240114-e3atqscafq
SHA256 993d05a9ad2b7acff877ec8cb60f6e6aef61192d9843a3733789909bf9cf4d2d
MD5 5a477a75b75da83db604c89a6d0a087d
SHA1 83a55a12fb3951fef6c7d6e5fa518a65bd7b7a31
SHA512 a63247faf45a9c0ef6220f13744f55d698b175fcdc64591bf01a28c249e35566422d983e2230b6ff44cc9907f37d956cea2b1dafcddbeb752ee392a382203827
SSDEEP 12288:+z+VAPUnWIW4u8sSA00gaOMfzjwT7yXW35/jU4kS6QUndca6:aUnWuArg/MfzUTXljrkS6jndca6
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a477a75b75da83db604c89a6d0a087d

File Explorer

5a477a75b75da83db604c89a6d0a087d

.exe 610KB

5a477a75b75da83db604c89a6d0a087d

IMPHASH b1f244737f482f7370a4248faac2bcb5
SHA256 993d05a9ad2b7acff877ec8cb60f6e6aef61192d9843a3733789909bf9cf4d2d
MD5 5a477a75b75da83db604c89a6d0a087d
SHA1 83a55a12fb3951fef6c7d6e5fa518a65bd7b7a31
SHA512 a63247faf45a9c0ef6220f13744f55d698b175fcdc64591bf01a28c249e35566422d983e2230b6ff44cc9907f37d956cea2b1dafcddbeb752ee392a382203827
SSDEEP 12288:+z+VAPUnWIW4u8sSA00gaOMfzjwT7yXW35/jU4kS6QUndca6:aUnWuArg/MfzUTXljrkS6jndca6
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8160

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCommandLineW FileTimeToDosDateTime SetThreadContext GetNativeSystemInfo lstrlenA CopyFileExW TlsGetValue GetDriveTypeW SetEndOfFile InterlockedIncrement GetCommState InterlockedDecrement GetSystemWindowsDirectoryW GetNamedPipeHandleStateA WaitForSingleObject SetEvent FreeEnvironmentStringsA GetTickCount VirtualFree GetConsoleAliasesLengthA GetSystemTimeAsFileTime WriteFile GetPriorityClass GetPrivateProfileIntA LoadLibraryW GetConsoleMode GetVersionExW SetConsoleMode SetConsoleCursorPosition IsDBCSLeadByte GetOverlappedResult GetStartupInfoW GlobalUnlock GetNamedPipeHandleStateW LCMapStringA GetFileSizeEx GetCPInfoExW GetLastError SetLastError GetProcAddress CopyFileA GetPrivateProfileStringA OpenMutexA LocalAlloc IsSystemResumeAutomatic SetCurrentDirectoryW WriteProfileSectionW HeapWalk FindAtomA Process32NextW CreateIoCompletionPort FindFirstChangeNotificationA FreeEnvironmentStringsW EnumResourceNamesA CompareStringA FatalAppExitA GetCurrentThreadId SetThreadAffinityMask OpenSemaphoreW DeleteFileW ReadConsoleOutputCharacterW GetSystemTime UnhandledExceptionFilter SetUnhandledExceptionFilter HeapValidate IsBadReadPtr RaiseException GetModuleHandleW Sleep ExitProcess GetModuleFileNameA GetStdHandle TlsAlloc TlsSetValue TlsFree TerminateProcess GetCurrentProcess IsDebuggerPresent GetModuleFileNameW EnterCriticalSection LeaveCriticalSection DeleteCriticalSection QueryPerformanceCounter GetCurrentProcessId GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA HeapDestroy HeapCreate HeapFree HeapAlloc HeapSize HeapReAlloc VirtualAlloc GetACP GetOEMCP GetCPInfo IsValidCodePage LoadLibraryA InitializeCriticalSectionAndSpinCount RtlUnwind SetFilePointer WideCharToMultiByte GetConsoleCP DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP FlushFileBuffers CreateFileA CloseHandle GetModuleHandleA

user32

GetTitleBarInfo

winhttp

WinHttpReadData

Sharing

General

Malware Config

Signatures

File Explorer

5a477a75b75da83db604c89a6d0a087d

kernel32

user32

winhttp

generic