5c0d9a2aebe93c5b9d80ebfe1d45be6f

General

Target
5c0d9a2aebe93c5b9d80ebfe1d45be6f
Size 10.6MB
Sample240115-ebyrgshfh2
SHA256 93a216f5814c73349d7ca18e94fe1534b8b01e7561b09c64a9134bbe65e74995
MD5 5c0d9a2aebe93c5b9d80ebfe1d45be6f
SHA1 6ba4ff92ae07a725a5f6150710baab95d6f0b9f3
SHA512 9966fa4c4138daa005342395cc2d8073f4237fb57200dd4e7ccc7298edea1c1548e4140aaba0d843da70975ca455dd68dd2e2566ac370112674bf59600cb0cbc
SSDEEP 98304:sjhd88888888888888888888888888888888888888888888888888888888888U:s
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c0d9a2aebe93c5b9d80ebfe1d45be6f

File Explorer

5c0d9a2aebe93c5b9d80ebfe1d45be6f

.exe 10.6MB

5c0d9a2aebe93c5b9d80ebfe1d45be6f

IMPHASH 1dd63394b7581f644406e79aaff7117c
SHA256 93a216f5814c73349d7ca18e94fe1534b8b01e7561b09c64a9134bbe65e74995
MD5 5c0d9a2aebe93c5b9d80ebfe1d45be6f
SHA1 6ba4ff92ae07a725a5f6150710baab95d6f0b9f3
SHA512 9966fa4c4138daa005342395cc2d8073f4237fb57200dd4e7ccc7298edea1c1548e4140aaba0d843da70975ca455dd68dd2e2566ac370112674bf59600cb0cbc
SSDEEP 98304:sjhd88888888888888888888888888888888888888888888888888888888888U:s
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

23776

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ExitProcess GetFileSize GlobalDeleteAtom SetFilePointer lstrlenA TlsGetValue GetConsoleAliasExesA SetLocalTime CommConfigDialogA FreeLibrary InterlockedDecrement ZombifyActCtx SetFirmwareEnvironmentVariableA GetNamedPipeHandleStateA CreateDirectoryW GetProfileSectionA SetComputerNameW GetComputerNameW SetTapeParameters GetTickCount CreateNamedPipeW GetConsoleAliasesLengthA GetPrivateProfileStringW WriteFile FindActCtxSectionStringA EnumTimeFormatsW CreateDirectoryExW SetProcessPriorityBoost GetSystemDirectoryW LoadLibraryW GetConsoleMode SetCommConfig _hread SizeofResource GetSystemWow64DirectoryW SetSystemTimeAdjustment GetSystemWindowsDirectoryA GetVersionExW InterlockedPopEntrySList GlobalFlags GetAtomNameW ReadFile GetBinaryTypeW GetOverlappedResult CompareStringW SetConsoleTitleA GlobalUnlock VerifyVersionInfoW GetStartupInfoA GetCurrentDirectoryW ReadConsoleOutputCharacterA GetProcessHeaps GetComputerNameExW SetStdHandle FreeUserPhysicalPages VerLanguageNameW LoadLibraryA Process32FirstW CreateSemaphoreW LocalAlloc SetCalendarInfoW SetConsoleCtrlHandler SetCurrentDirectoryW WriteProfileSectionW VirtualLock SetConsoleWindowInfo FindAtomA WriteProfileStringA GetProcessShutdownParameters QueryMemoryResourceNotification FreeEnvironmentStringsW VirtualProtect GetFileAttributesExW GetCPInfoExA _lopen TlsAlloc GetWindowsDirectoryW GetVersion GetVolumeNameForVolumeMountPointW GetCurrentProcessId LCMapStringW CopyFileExA DeleteFileA InterlockedIncrement Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW GetCommandLineA HeapValidate IsBadReadPtr RaiseException RtlUnwind GetProcAddress GetModuleHandleW TlsSetValue GetCurrentThreadId TlsFree SetLastError GetLastError DebugBreak GetStdHandle OutputDebugStringA WriteConsoleW GetFileType OutputDebugStringW QueryPerformanceCounter GetSystemTimeAsFileTime GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings WideCharToMultiByte GetEnvironmentStringsW SetHandleCount HeapDestroy HeapCreate HeapFree VirtualFree FlushFileBuffers GetConsoleCP HeapAlloc HeapSize HeapReAlloc VirtualAlloc GetACP GetOEMCP GetCPInfo IsValidCodePage MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP LCMapStringA GetModuleHandleA CloseHandle CreateFileA

user32

GetCursorInfo

Sharing

General

Malware Config

Signatures

File Explorer

5c0d9a2aebe93c5b9d80ebfe1d45be6f

kernel32

user32

generic