5ce42e14893624a543f4fd407c054866

General

Target
5ce42e14893624a543f4fd407c054866
Size 330KB
Sample240115-mv5cdaedaj
SHA256 8b2b689999ceb3c815eebb3b53961aa2a13bf9e4647f8b074c726a535781aa94
MD5 5ce42e14893624a543f4fd407c054866
SHA1 e7a8b0a4f15ba45394df9e97c5ed115a3fea289f
SHA512 ec6d30b44bf81c6bb56f7099b205c673f13e21188948acf8f6db3048c3f23709b80189dc2da3cf42d99b2671ff1166c3e2eaf402daf14e12855007e945c18b5a
SSDEEP 6144:/IzapToeBnT0s91rG3rQUZdfi0Vgt3/DzQFQt+B2T8mQO9kSgr07HLQy:2apMeBnT0s91rG3r7dfi0odtkGhQO9kO
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ce42e14893624a543f4fd407c054866

File Explorer

5ce42e14893624a543f4fd407c054866

.exe 330KB

5ce42e14893624a543f4fd407c054866

IMPHASH 613f2e4a97d34083c947d866c86b0b7d
SHA256 8b2b689999ceb3c815eebb3b53961aa2a13bf9e4647f8b074c726a535781aa94
MD5 5ce42e14893624a543f4fd407c054866
SHA1 e7a8b0a4f15ba45394df9e97c5ed115a3fea289f
SHA512 ec6d30b44bf81c6bb56f7099b205c673f13e21188948acf8f6db3048c3f23709b80189dc2da3cf42d99b2671ff1166c3e2eaf402daf14e12855007e945c18b5a
SSDEEP 6144:/IzapToeBnT0s91rG3rQUZdfi0Vgt3/DzQFQt+B2T8mQO9kSgr07HLQy:2apMeBnT0s91rG3r7dfi0odtkGhQO9kO
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

5104

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetComputerNameA UnregisterWait SetFilePointer lstrlenA GetConsoleAliasesLengthW CopyFileExW TlsGetValue GetConsoleAliasExesLengthA MapUserPhysicalPages InterlockedIncrement VerSetConditionMask InterlockedDecrement ZombifyActCtx CompareFileTime GetSystemWindowsDirectoryW SetEnvironmentVariableW GlobalLock WriteConsoleInputA FreeEnvironmentStringsA CreateNamedPipeW VirtualFree GenerateConsoleCtrlEvent GetConsoleAliasExesW WriteFile SetCommState SetProcessPriorityBoost FindResourceExA LoadLibraryW GetCalendarInfoA GetVersionExW InitAtomTable GlobalFlags GetComputerNameExA GetConsoleAliasW SetConsoleCursorPosition GetBinaryTypeW VirtualUnlock InterlockedExchange GetFileSizeEx SetCurrentDirectoryA GetStartupInfoA GetCPInfoExW FreeLibraryAndExitThread GetCurrentDirectoryW ReadConsoleOutputCharacterA GetProcAddress SetFirmwareEnvironmentVariableW ReadFileEx SetStdHandle SetComputerNameA GetLocalTime LoadLibraryA OpenMutexA CreateSemaphoreW LocalAlloc WriteProfileSectionW FindAtomA SetSystemTime CreateIoCompletionPort SetConsoleTitleW EnumResourceNamesA WriteProfileStringW BuildCommDCBA CompareStringA GetFileAttributesExW GetConsoleCursorInfo GetCPInfoExA _lopen FindAtomW GetVolumeNameForVolumeMountPointW GetProfileSectionW AreFileApisANSI CommConfigDialogW DeleteFileA FlushFileBuffers GetLastError MoveFileA GetCommandLineA HeapValidate IsBadReadPtr RaiseException DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetModuleFileNameW SetUnhandledExceptionFilter QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime GetModuleHandleW Sleep ExitProcess GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType TlsAlloc TlsSetValue TlsFree SetLastError HeapDestroy HeapCreate HeapFree HeapAlloc TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent HeapSize HeapReAlloc VirtualAlloc GetACP GetOEMCP GetCPInfo IsValidCodePage RtlUnwind InitializeCriticalSectionAndSpinCount DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA GetConsoleCP GetConsoleMode WriteConsoleA GetConsoleOutputCP CreateFileA CloseHandle GetModuleHandleA

user32

GetMessageTime GetMenuInfo

Sharing

General

Malware Config

Signatures

File Explorer

5ce42e14893624a543f4fd407c054866

kernel32

user32

generic