5204ea509328d2ce79d99a88758e45e8757bc9171abfc4577087b456ae9d7961

General

Target
5204ea509328d2ce79d99a88758e45e8757bc9171abfc4577087b456ae9d7961
Size 867KB
Sample240128-19fjfsbda9
SHA256 5204ea509328d2ce79d99a88758e45e8757bc9171abfc4577087b456ae9d7961
MD5 cc975551f266db95f3ce36928284233f
SHA1 5fcda6c59909bd5238675c3690e15252c301ed5c
SHA512 8c0faeea05ff446c1b2df632a1313a6860c7c64f6e8511a19a8ee00dce8b64ea1c413a25d2feb30dd645a9070a59753d4a22095b0b8bd517771942e51a137651
SSDEEP 24576:rEgLmH/eRWc3wJnEtynDnVOFT9sSJYO7:QGmH/CWnpEtynDnLO7
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5204ea509328d2ce79d99a88758e45e8757bc9171abfc4577087b456ae9d7961

File Explorer

5204ea509328d2ce79d99a88758e45e8757bc9171abfc4577087b456ae9d7961

.exe 867KB

5204ea509328d2ce79d99a88758e45e8757bc9171abfc4577087b456ae9d7961

IMPHASH cd132b2f89f79b212f0c4061c0a4f036
SHA256 5204ea509328d2ce79d99a88758e45e8757bc9171abfc4577087b456ae9d7961
MD5 cc975551f266db95f3ce36928284233f
SHA1 5fcda6c59909bd5238675c3690e15252c301ed5c
SHA512 8c0faeea05ff446c1b2df632a1313a6860c7c64f6e8511a19a8ee00dce8b64ea1c413a25d2feb30dd645a9070a59753d4a22095b0b8bd517771942e51a137651
SSDEEP 24576:rEgLmH/eRWc3wJnEtynDnVOFT9sSJYO7:QGmH/CWnpEtynDnLO7
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

11291

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetNativeSystemInfo GetLocaleInfoA FindResourceW SystemTimeToTzSpecificLocalTime HeapAlloc EndUpdateResourceW InterlockedIncrement MoveFileExW OpenJobObjectA SetComputerNameW FreeEnvironmentStringsA GetTickCount EnumCalendarInfoExW WriteFile LoadLibraryW LocalShrink WriteConsoleOutputA GetAtomNameW CompareStringW MultiByteToWideChar ReleaseSemaphore WritePrivateProfileStringW GetConsoleAliasesW SetCurrentDirectoryA GetStartupInfoA GetLastError GetLongPathNameW GetProcAddress LoadLibraryA LocalAlloc GetDiskFreeSpaceA SetConsoleTitleW FreeEnvironmentStringsW GetVolumeInformationW EnumSystemLocalesA GetUserDefaultLCID GetCommandLineW HeapSetInformation GetStartupInfoW RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent DecodePointer EncodePointer HeapFree IsProcessorFeaturePresent GetModuleHandleW ExitProcess GetStdHandle GetModuleFileNameW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement GetCurrentThread HeapCreate HeapDestroy QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode EnterCriticalSection LeaveCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage Sleep FatalAppExitA RtlUnwind HeapSize SetConsoleCtrlHandler FreeLibrary InterlockedExchange GetLocaleInfoW SetStdHandle WriteConsoleW LCMapStringW GetStringTypeW HeapReAlloc CreateFileW CloseHandle FlushFileBuffers IsValidLocale

user32

SetActiveWindow

Sharing

General

Malware Config

Signatures

File Explorer

5204ea509328d2ce79d99a88758e45e8757bc9171abfc4577087b456ae9d7961

kernel32

user32

generic