02dbfc19aaffb56f648cbd795f9d8809234135b2775cc2f6f9a64acdc62dc1f6

General

Target
02dbfc19aaffb56f648cbd795f9d8809234135b2775cc2f6f9a64acdc62dc1f6
Size 223KB
Sample240128-17d8lsbcd4
SHA256 02dbfc19aaffb56f648cbd795f9d8809234135b2775cc2f6f9a64acdc62dc1f6
MD5 b58949f7f2261a8b49ee6ced74e44427
SHA1 701a674ab88b0661d3a635214de511fd7a8ad895
SHA512 77c7aa8b30771abcdb98da0ede1556560497099bede419c705daae435e526eb71b5a3a5ff9232543ba68263e4b2e0a190488be68783bffd3232b58ca2c93e8c4
SSDEEP 6144:XlALxi9yhw/KvX6DhUiKPFtOoK/fgqik:V5SvqD2/OoKQ
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02dbfc19aaffb56f648cbd795f9d8809234135b2775cc2f6f9a64acdc62dc1f6

File Explorer

02dbfc19aaffb56f648cbd795f9d8809234135b2775cc2f6f9a64acdc62dc1f6

.exe 223KB

02dbfc19aaffb56f648cbd795f9d8809234135b2775cc2f6f9a64acdc62dc1f6

IMPHASH b270ac0e67aad6305196ef71a1db1fb1
SHA256 02dbfc19aaffb56f648cbd795f9d8809234135b2775cc2f6f9a64acdc62dc1f6
MD5 b58949f7f2261a8b49ee6ced74e44427
SHA1 701a674ab88b0661d3a635214de511fd7a8ad895
SHA512 77c7aa8b30771abcdb98da0ede1556560497099bede419c705daae435e526eb71b5a3a5ff9232543ba68263e4b2e0a190488be68783bffd3232b58ca2c93e8c4
SSDEEP 6144:XlALxi9yhw/KvX6DhUiKPFtOoK/fgqik:V5SvqD2/OoKQ
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

5103

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

UnregisterWait GetStringTypeA FindResourceW HeapAlloc MoveFileExW OpenJobObjectA InterlockedDecrement SetTapeParameters GetTickCount GetConsoleAliasesA TzSpecificLocalTimeToSystemTime LoadLibraryW GetLocaleInfoW IsProcessorFeaturePresent GetAtomNameW ReadFile GetEnvironmentVariableA CompareStringW SetConsoleTitleA RaiseException GetLastError GetProcAddress SetComputerNameA LoadLibraryA LocalAlloc WritePrivateProfileStringA SetCurrentDirectoryW CancelIo FreeEnvironmentStringsW ReleaseMutex EndUpdateResourceA EnumCalendarInfoExA LocalFree SetFileAttributesW GetCommandLineW HeapSetInformation GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW ExitProcess DecodePointer WriteFile GetStdHandle GetModuleFileNameW HeapCreate HeapDestroy EncodePointer GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId GetCurrentThread QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection FatalAppExitA EnterCriticalSection SetConsoleCtrlHandler FreeLibrary InterlockedExchange HeapFree Sleep GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind WideCharToMultiByte HeapSize HeapReAlloc LCMapStringW MultiByteToWideChar GetStringTypeW GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale

Sharing

General

Malware Config

Signatures

File Explorer

02dbfc19aaffb56f648cbd795f9d8809234135b2775cc2f6f9a64acdc62dc1f6

kernel32

generic