file

General

Target
file
Size 744KB
Sample240122-l8tmcsedd9
SHA256 54ee98582d3733d200040666a41685a51467de8ed0f6e06bd076fb94ee7ec1a9
MD5 6f0e5ad311936054a33eb7287c594521
SHA1 c973d47705660081bcbce5a99832c5f035168776
SHA512 a00a696feee34b30eaa3dc88878d649ea824d82abf67fbcfd058a2942d52a0092f750e3a41abc303b8b04a33b05a34b528be4e9827a272a40067e66ba8fa367d
SSDEEP 12288:heZ8Ft+DSpr3jXVtrw2iiIhzKW8jZv+U6da6dLMpzecpMa007b3MwERN6WG0uy+E:he8thTXg1TvOZv+U6dJpD6WSfE
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file

File Explorer

file

.exe 744KB

IMPHASH c52f363ae887f7e2b622bb07b5377eee
SHA256 54ee98582d3733d200040666a41685a51467de8ed0f6e06bd076fb94ee7ec1a9
MD5 6f0e5ad311936054a33eb7287c594521
SHA1 c973d47705660081bcbce5a99832c5f035168776
SHA512 a00a696feee34b30eaa3dc88878d649ea824d82abf67fbcfd058a2942d52a0092f750e3a41abc303b8b04a33b05a34b528be4e9827a272a40067e66ba8fa367d
SSDEEP 12288:heZ8Ft+DSpr3jXVtrw2iiIhzKW8jZv+U6da6dLMpzecpMa007b3MwERN6WG0uy+E:he8thTXg1TvOZv+U6dJpD6WSfE
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8414

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetSystemDefaultLangID FillConsoleOutputCharacterA GetConsoleAliasesLengthW FindResourceW InterlockedDecrement FindCloseChangeNotification MoveFileWithProgressA GetTickCount VirtualFree GetConsoleAliasesLengthA ReadConsoleW LoadLibraryW FreeConsole GetModuleFileNameW SetComputerNameExW GetStartupInfoW CreateJobObjectA GetLastError SetLastError ReadConsoleOutputCharacterA GetProcAddress VirtualAlloc LoadLibraryA WriteConsoleA InterlockedExchangeAdd LocalAlloc MoveFileA FindFirstVolumeMountPointW RemoveDirectoryW QueryDosDeviceW GlobalFindAtomW GetModuleHandleA PurgeComm GetFileAttributesExW SetCalendarInfoA GetCurrentProcessId DebugBreak DeleteFileA MultiByteToWideChar GetModuleHandleW Sleep ExitProcess GetCPInfo InterlockedIncrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree CloseHandle EnterCriticalSection LeaveCriticalSection RaiseException WriteFile GetStdHandle GetModuleFileNameA DeleteCriticalSection InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapCreate QueryPerformanceCounter GetSystemTimeAsFileTime LCMapStringA WideCharToMultiByte LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapAlloc HeapReAlloc SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind HeapSize GetConsoleOutputCP WriteConsoleW SetFilePointer CreateFileA

Sharing