5de1fe735f2aa290f49d687ed5888bb6

General

Target
5de1fe735f2aa290f49d687ed5888bb6
Size 1.1MB
Sample240115-x2rpzadefm
SHA256 7aa11f82498f11270ec3b7de752a94e22a95057d51ec4d39998e2f101e448331
MD5 5de1fe735f2aa290f49d687ed5888bb6
SHA1 3b01ff774d9cef6faa7c5e5d595275eb94b43f71
SHA512 3ee92155186b49152815b7cd60d4e1e68132da37553d9c1d203f66e13128746d092f014881d6d8462ae26022c10be4af943d4a56c03ed560ed977187046e8cf1
SSDEEP 24576:h9ierLYN6ciNWakvRWStmmbVyVGuYFbdLs:merMpiQhfbjDhL
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5de1fe735f2aa290f49d687ed5888bb6

File Explorer

5de1fe735f2aa290f49d687ed5888bb6

.exe 1.1MB

5de1fe735f2aa290f49d687ed5888bb6

IMPHASH 894d0e2453b674d7fa4cc3ff89ddc063
SHA256 7aa11f82498f11270ec3b7de752a94e22a95057d51ec4d39998e2f101e448331
MD5 5de1fe735f2aa290f49d687ed5888bb6
SHA1 3b01ff774d9cef6faa7c5e5d595275eb94b43f71
SHA512 3ee92155186b49152815b7cd60d4e1e68132da37553d9c1d203f66e13128746d092f014881d6d8462ae26022c10be4af943d4a56c03ed560ed977187046e8cf1
SSDEEP 24576:h9ierLYN6ciNWakvRWStmmbVyVGuYFbdLs:merMpiQhfbjDhL
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8492

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EnumDateFormatsExW EndUpdateResourceW InterlockedIncrement MoveFileExW GetConsoleAliasA InterlockedDecrement WritePrivateProfileSectionA GetSystemWindowsDirectoryW GetEnvironmentStringsW WaitForSingleObject SetConsoleScreenBufferSize GetComputerNameW SetEvent GetConsoleAliasesLengthA GetConsoleTitleA ReadConsoleOutputA GetUserDefaultLangID CreateActCtxW GetConsoleCP GetVersionExW GetFileAttributesA DnsHostnameToComputerNameW lstrcpynW VerifyVersionInfoA IsBadWritePtr GetModuleFileNameW GetCompressedFileSizeA GetSystemDirectoryA CreateFileW GetACP GetVolumePathNameA lstrlenW SetConsoleTitleA FlushFileBuffers InterlockedExchange GetLastError GetProcAddress BeginUpdateResourceW CreateTimerQueueTimer LocalLock EnterCriticalSection GetLocalTime WriteConsoleA GetProcessId LocalAlloc CreateTapePartition SetConsoleDisplayMode GlobalGetAtomNameW SetEnvironmentVariableA GetModuleHandleA CancelTimerQueueTimer BuildCommDCBA VirtualProtect PeekConsoleInputA WriteConsoleOutputAttribute SetCalendarInfoA ReadConsoleInputW FindFirstVolumeW AreFileApisANSI LCMapStringW lstrcatA GetSystemDefaultLangID UnhandledExceptionFilter SetUnhandledExceptionFilter GetModuleHandleW Sleep ExitProcess GetStartupInfoW WriteFile GetStdHandle GetModuleFileNameA HeapAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId DeleteCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess IsDebuggerPresent LoadLibraryA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException VirtualAlloc HeapReAlloc GetCPInfo GetOEMCP IsValidCodePage RtlUnwind HeapSize GetLocaleInfoA WideCharToMultiByte GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA

user32

RealGetWindowClassA

advapi32

AdjustTokenPrivileges

Sharing

General

Malware Config

Signatures

File Explorer

5de1fe735f2aa290f49d687ed5888bb6

kernel32

user32

advapi32

generic