c5753bab520f5ae2fdcbe9886d8b5fa1[.]exe

General

Target
c5753bab520f5ae2fdcbe9886d8b5fa1.exe
Size 287KB
Sample240205-lvg2eafber
SHA256 5d2d0aadfb9a0f47c7803c207b2f7b5c9efd79261d7f351b367b479788c4d47d
MD5 c5753bab520f5ae2fdcbe9886d8b5fa1
SHA1 11c5aa0c12218ddb1bfea2532b8e53e0017de434
SHA512 7d48338aa1bf816416609b4525b0206bfc79b60e0e40c5419bbd12a5e5c290ecc6010492933106ddd97f343c19c66e82bb636123bcec2f97bea3c644abdb7b74
SSDEEP 3072:S2IDrkVtFdm6Ks+5fcuzStgrSDb4MVGr+SbfJw8wOf/fseGtI6P0s4iNc:S9Drst6snDbvVoJwc/fse1s
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c5753bab520f5ae2fdcbe9886d8b5fa1.exe

File Explorer

c5753bab520f5ae2fdcbe9886d8b5fa1.exe

.exe 287KB

c5753bab520f5ae2fdcbe9886d8b5fa1.exe

IMPHASH ebe35e0085e613a421d4abea9476d495
SHA256 5d2d0aadfb9a0f47c7803c207b2f7b5c9efd79261d7f351b367b479788c4d47d
MD5 c5753bab520f5ae2fdcbe9886d8b5fa1
SHA1 11c5aa0c12218ddb1bfea2532b8e53e0017de434
SHA512 7d48338aa1bf816416609b4525b0206bfc79b60e0e40c5419bbd12a5e5c290ecc6010492933106ddd97f343c19c66e82bb636123bcec2f97bea3c644abdb7b74
SSDEEP 3072:S2IDrkVtFdm6Ks+5fcuzStgrSDb4MVGr+SbfJw8wOf/fseGtI6P0s4iNc:S9Drst6snDbvVoJwc/fse1s
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

5887

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

EndUpdateResourceW InterlockedIncrement MoveFileExW OpenJobObjectA SetDefaultCommConfigW CreateDirectoryW GetTickCount GetProcessHeap GetConsoleAliasesLengthA TzSpecificLocalTimeToSystemTime GetSystemTimes WideCharToMultiByte LoadLibraryW CompareStringW GetStartupInfoW WritePrivateProfileStringW FlushFileBuffers GetConsoleAliasesW HeapAlloc SetLastError GetProcAddress CreateNamedPipeA EnumDateFormatsExA ResetEvent OpenWaitableTimerA LoadLibraryA LocalAlloc DnsHostnameToComputerNameA SetProcessWorkingSetSize FreeEnvironmentStringsW GetCurrentDirectoryA FileTimeToLocalFileTime GetVolumeInformationW IsValidLocale EnumSystemLocalesA GetUserDefaultLCID GetLocaleInfoA SetCurrentDirectoryA GetModuleHandleExA EncodePointer DecodePointer GetCommandLineA HeapSetInformation TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW ExitProcess WriteFile GetStdHandle GetModuleFileNameW HeapCreate HeapDestroy Sleep HeapSize EnterCriticalSection LeaveCriticalSection GetModuleFileNameA GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree GetCurrentThreadId GetLastError InterlockedDecrement GetCurrentThread QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime FatalAppExitA SetConsoleCtrlHandler FreeLibrary InterlockedExchange GetLocaleInfoW HeapReAlloc RtlUnwind HeapFree GetCPInfo GetACP GetOEMCP IsValidCodePage GetConsoleCP GetConsoleMode LCMapStringW MultiByteToWideChar GetStringTypeW SetFilePointer IsProcessorFeaturePresent CloseHandle WriteConsoleW SetStdHandle CreateFileW RaiseException

user32

DestroyIcon GetClassLongW

advapi32

ReadEventLogA GetServiceKeyNameA

Name

.text

Size

198KB

Virtual Size

197KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

14KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

8KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.vanob

Size

512B

Virtual Size

124B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.jicis

Size

1024B

Virtual Size

1024B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

62KB

Virtual Size

2.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

c5753bab520f5ae2fdcbe9886d8b5fa1.exe

kernel32

user32

advapi32

generic