5bbbb8d6a54d686b060d239a323c2127

General

Target
5bbbb8d6a54d686b060d239a323c2127
Size 12.4MB
Sample240115-bgrzcafdc4
SHA256 2c8b3688a091e5e4e73e451122e85f0e552e7721c1963208031a03574bd97429
MD5 5bbbb8d6a54d686b060d239a323c2127
SHA1 8ca22413afbeadfe1a03304441819f002734088c
SHA512 cf1c83e5cee760eb2cf495ba4460ce2b4c2fb451c328652aafbea93e15a208bb30219fcc0992206608e4a35c7eb42ccd138e6c4e965956f9ab2f11b8ad8a27d4
SSDEEP 49152:DHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHn:
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5bbbb8d6a54d686b060d239a323c2127

File Explorer

5bbbb8d6a54d686b060d239a323c2127

.exe 12.4MB

5bbbb8d6a54d686b060d239a323c2127

IMPHASH 65cee1cc96d935afa5d7eb55e18fefb3
SHA256 2c8b3688a091e5e4e73e451122e85f0e552e7721c1963208031a03574bd97429
MD5 5bbbb8d6a54d686b060d239a323c2127
SHA1 8ca22413afbeadfe1a03304441819f002734088c
SHA512 cf1c83e5cee760eb2cf495ba4460ce2b4c2fb451c328652aafbea93e15a208bb30219fcc0992206608e4a35c7eb42ccd138e6c4e965956f9ab2f11b8ad8a27d4
SSDEEP 49152:DHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHn:
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

4240

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GlobalDeleteAtom FindFirstFileW TlsGetValue GetStringTypeA SetLocalTime GetDriveTypeW GetNumberOfConsoleInputEvents MapUserPhysicalPages CallNamedPipeA InterlockedIncrement GetCommState InterlockedDecrement ScrollConsoleScreenBufferW WritePrivateProfileSectionA WaitForSingleObject WriteConsoleInputA SignalObjectAndWait OpenSemaphoreA CreateDirectoryExA FreeEnvironmentStringsA GetModuleHandleW GetPrivateProfileStringW GetConsoleTitleA WriteFileGather FindResourceExA GetPrivateProfileStructW SetVolumeMountPointA GetSystemTimeAdjustment GlobalFlags GetComputerNameExA Beep SetMessageWaitingIndicator VerifyVersionInfoA GetBinaryTypeA GetAtomNameW ReadFile CreateFileW CompareStringW GetACP lstrlenW LCMapStringA VerifyVersionInfoW CreateDirectoryA HeapReAlloc SetCurrentDirectoryA OpenMutexW IsDBCSLeadByteEx GetProcAddress SetVolumeLabelW SetStdHandle SetComputerNameA CreateMemoryResourceNotification SetFileApisToOEM Process32FirstW OpenWaitableTimerW LocalAlloc GetFileType SetConsoleOutputCP QueryDosDeviceW WriteProfileSectionW GetCommMask AddAtomA SetCommMask EnumResourceTypesW SetConsoleCursorInfo GetThreadPriority SetConsoleTitleW GetModuleHandleA EnumResourceNamesA FindNextFileW RequestWakeupLatency BuildCommDCBA GetCurrentDirectoryA SetCalendarInfoA GetVersionExA GetWindowsDirectoryW GetCurrentProcessId FindActCtxSectionStringW ReadConsoleOutputCharacterW InterlockedPushEntrySList GetProfileSectionW GetVolumeInformationW CloseHandle GetConsoleMode GetConsoleCP SetFilePointer RaiseException InterlockedExchange FileTimeToDosDateTime GetLastError MoveFileA GetCommandLineW HeapSetInformation GetStartupInfoW SetUnhandledExceptionFilter QueryPerformanceCounter GetTickCount GetCurrentThreadId GetSystemTimeAsFileTime DecodePointer ExitProcess GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount DeleteCriticalSection HeapValidate IsBadReadPtr EncodePointer TlsAlloc TlsSetValue TlsFree SetLastError HeapCreate WriteFile TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent RtlUnwind GetOEMCP GetCPInfo IsValidCodePage EnterCriticalSection LeaveCriticalSection LoadLibraryW HeapAlloc GetModuleFileNameA HeapSize HeapQueryInformation HeapFree OutputDebugStringA WriteConsoleW OutputDebugStringW GetStringTypeW MultiByteToWideChar WideCharToMultiByte LCMapStringW IsProcessorFeaturePresent FlushFileBuffers

user32

GetCursorInfo GetMenuInfo GetMessageTime GetMenuBarInfo

advapi32

InitiateSystemShutdownW

Sharing

General

Malware Config

Signatures

File Explorer

5bbbb8d6a54d686b060d239a323c2127

kernel32

user32

advapi32

generic