a049e4d179686744b0e4e6472aadecb8

General

Target
a049e4d179686744b0e4e6472aadecb8
Size 1.2MB
Sample240216-ns91hsab2s
SHA256 4a05a54dfa70ecd26651badbc03975c7c896e0a2f17acb030acf8d12441276a5
MD5 a049e4d179686744b0e4e6472aadecb8
SHA1 2aedafb10302fe4121858e8233f826f8260d63ff
SHA512 b2420e1cbc41d44fa48142e4a3f5c169c92db19ea5cde723dfbb01f1ff0f16ed0598636176c64298f405fcdbd86bcb9a94f43d135d4e68448a99ce8de62ff6ea
SSDEEP 24576:aifXVeSyIuPNpoRP2BmhqNw1N/HWlRM2g/dI8/nJq1:aeeXPNp22BwoNk2g/dI8R
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a049e4d179686744b0e4e6472aadecb8

File Explorer

a049e4d179686744b0e4e6472aadecb8

.exe 1.2MB

a049e4d179686744b0e4e6472aadecb8

IMPHASH 80892f18aacf6a3ec193623c3a9507f4
SHA256 4a05a54dfa70ecd26651badbc03975c7c896e0a2f17acb030acf8d12441276a5
MD5 a049e4d179686744b0e4e6472aadecb8
SHA1 2aedafb10302fe4121858e8233f826f8260d63ff
SHA512 b2420e1cbc41d44fa48142e4a3f5c169c92db19ea5cde723dfbb01f1ff0f16ed0598636176c64298f405fcdbd86bcb9a94f43d135d4e68448a99ce8de62ff6ea
SSDEEP 24576:aifXVeSyIuPNpoRP2BmhqNw1N/HWlRM2g/dI8/nJq1:aeeXPNp22BwoNk2g/dI8R
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

16341

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\letud yex-p.pdb

kernel32

HeapReAlloc SetLocalTime EndUpdateResourceW InterlockedIncrement InterlockedDecrement GetCurrentProcess GetSystemWindowsDirectoryW SetEnvironmentVariableW GetEnvironmentStringsW GetUserDefaultLCID WaitForSingleObject AddConsoleAliasW SetVolumeMountPointW EnumCalendarInfoExW ReadConsoleW WriteFile GetUserDefaultLangID GetEnvironmentStrings GlobalAlloc WriteConsoleOutputA GetVersionExW PulseEvent lstrcpynW FindNextVolumeW VerifyVersionInfoA HeapQueryInformation GetModuleFileNameW GetACP LCMapStringA GetProcAddress GetComputerNameExW VerLanguageNameA CreateTimerQueueTimer FreeUserPhysicalPages GetDefaultCommConfigA GetModuleHandleA QueueUserWorkItem GetConsoleTitleW VirtualProtect PeekConsoleInputA GetCPInfoExA ReadConsoleInputW CreateThread LeaveCriticalSection GetCommandLineW Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree TerminateProcess IsDebuggerPresent GetStartupInfoW RtlUnwind RaiseException WideCharToMultiByte MultiByteToWideChar LCMapStringW GetCPInfo GetModuleHandleW ExitProcess GetStdHandle GetModuleFileNameA HeapAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId HeapCreate VirtualFree VirtualAlloc HeapSize FreeEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetOEMCP IsValidCodePage GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeA GetStringTypeW LoadLibraryA InitializeCriticalSectionAndSpinCount GetLocaleInfoW GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle CreateFileA

user32

RealGetWindowClassW

Sharing

General

Malware Config

Signatures

File Explorer

a049e4d179686744b0e4e6472aadecb8

kernel32

user32

generic