5e990c5457707f41c3b72acefa304932

General

Target
5e990c5457707f41c3b72acefa304932
Size 198KB
Sample240116-br8pvabdc6
SHA256 7fb3e8a0c4b50a519c283a7b7702ccd23c38e78dc251d32b120d8e8a89f87b49
MD5 5e990c5457707f41c3b72acefa304932
SHA1 74170bf430cfc225768cffdb976fa68b917ae9ac
SHA512 f459e753bfbdedd808d88a69b50cc90d216bdba981c81b8df9f156aa4eba7f4cc4d8e03d3987dd1cf93373cd64813494434e0adcadb52da6b64ea864f87d5ca2
SSDEEP 3072:TjxcoLwFA0HmgidzxalFl8V7WnDn54XtjSwrv9ENPGvi1vw7KJIX:TjxLLwFA05NlFl8VLtVvMGAvw7K
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e990c5457707f41c3b72acefa304932

File Explorer

5e990c5457707f41c3b72acefa304932

.exe 198KB

5e990c5457707f41c3b72acefa304932

IMPHASH b7ebe503aba8ff6fce4b2b89581116dd
SHA256 7fb3e8a0c4b50a519c283a7b7702ccd23c38e78dc251d32b120d8e8a89f87b49
MD5 5e990c5457707f41c3b72acefa304932
SHA1 74170bf430cfc225768cffdb976fa68b917ae9ac
SHA512 f459e753bfbdedd808d88a69b50cc90d216bdba981c81b8df9f156aa4eba7f4cc4d8e03d3987dd1cf93373cd64813494434e0adcadb52da6b64ea864f87d5ca2
SSDEEP 3072:TjxcoLwFA0HmgidzxalFl8V7WnDn54XtjSwrv9ENPGvi1vw7KJIX:TjxLLwFA05NlFl8VLtVvMGAvw7K
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

7534

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetLocalTime InterlockedIncrement ReadConsoleA InterlockedDecrement GetCurrentProcess GetSystemWindowsDirectoryW SetEnvironmentVariableW GetEnvironmentStringsW GetUserDefaultLCID AddConsoleAliasW SetVolumeMountPointW EnumCalendarInfoExW WriteFile GetUserDefaultLangID GetEnvironmentStrings WriteConsoleOutputA LeaveCriticalSection lstrcpynW FindNextVolumeW VerifyVersionInfoA HeapQueryInformation GetModuleFileNameW GetACP GetConsoleOutputCP GetProcAddress GetComputerNameExW VerLanguageNameA CreateTimerQueueTimer HeapUnlock LocalAlloc GetDefaultCommConfigA GetModuleHandleA QueueUserWorkItem GetConsoleTitleW PeekConsoleInputA GetCPInfoExA ReadConsoleInputW GlobalReAlloc LCMapStringW PulseEvent GetCommandLineW UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW Sleep ExitProcess GetLastError GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId EnterCriticalSection TerminateProcess IsDebuggerPresent HeapSize SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection SetFilePointer FreeEnvironmentStringsW HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LoadLibraryA InitializeCriticalSectionAndSpinCount GetCPInfo GetOEMCP IsValidCodePage MultiByteToWideChar RtlUnwind HeapAlloc HeapReAlloc VirtualAlloc WideCharToMultiByte SetStdHandle GetLocaleInfoA GetStringTypeA GetStringTypeW LCMapStringA GetConsoleCP GetConsoleMode FlushFileBuffers CloseHandle WriteConsoleA WriteConsoleW CreateFileA

user32

RealGetWindowClassW

gdi32

GetCharWidthFloatA

Sharing

General

Malware Config

Signatures

File Explorer

5e990c5457707f41c3b72acefa304932

kernel32

user32

gdi32

generic