b0eda06015f710f6810a428245ff6374

General

Target
b0eda06015f710f6810a428245ff6374
Size 556KB
Sample240304-can5jsfe37
SHA256 5978984d7f8a80cba8b94b3e4e973eeb6218f82535ea8e55aca5deb8830afc2c
MD5 b0eda06015f710f6810a428245ff6374
SHA1 80fe2b21c2cf756bd162b2112d0f956c53cfe6da
SHA512 f4d59bfbd2e55151c8a39845fb8c3f9ed11b4d66c4f785e1ba2e08926d3096c9a21e9b97e85d5272cfca43f8696a863c9d9ee696cef7a231ea6582ba864e4ec2
SSDEEP 12288:pYAGG/rYJXhilcyeMTy5pUnOPCxi8RGiyO/DZmYd8eD2A+kIz:pj/rY0fOPCUTih/4neKYIz
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b0eda06015f710f6810a428245ff6374

File Explorer

b0eda06015f710f6810a428245ff6374

.exe 556KB

b0eda06015f710f6810a428245ff6374

IMPHASH cc12335fcaf380223f708d3b30304b0a
SHA256 5978984d7f8a80cba8b94b3e4e973eeb6218f82535ea8e55aca5deb8830afc2c
MD5 b0eda06015f710f6810a428245ff6374
SHA1 80fe2b21c2cf756bd162b2112d0f956c53cfe6da
SHA512 f4d59bfbd2e55151c8a39845fb8c3f9ed11b4d66c4f785e1ba2e08926d3096c9a21e9b97e85d5272cfca43f8696a863c9d9ee696cef7a231ea6582ba864e4ec2
SSDEEP 12288:pYAGG/rYJXhilcyeMTy5pUnOPCxi8RGiyO/DZmYd8eD2A+kIz:pj/rY0fOPCUTih/4neKYIz
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

5408

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\wag.pdb

kernel32

GetCommandLineW GetComputerNameA EnumResourceNamesW UnregisterWait SetPriorityClass WriteConsoleInputW SetFilePointer lstrlenA GetConsoleAliasesLengthW InterlockedIncrement GetQueuedCompletionStatus InterlockedDecrement WaitNamedPipeA CompareFileTime SetEnvironmentVariableW CreateDirectoryW GlobalLock OpenSemaphoreA FreeEnvironmentStringsA GetTickCount AddRefActCtx LoadLibraryW GetSystemWow64DirectoryW IsProcessorFeaturePresent CreateSemaphoreA ReadFile GetModuleFileNameW CompareStringW LCMapStringA GetFileSizeEx GetStartupInfoA OpenMutexW GetHandleInformation GetCurrentDirectoryW SetLastError GetProcAddress VirtualAlloc WriteProfileSectionA ReadFileEx CopyFileA GetPrivateProfileStringA ResetEvent LoadLibraryA OpenMutexA GetConsoleScreenBufferInfo LocalAlloc GetExitCodeThread SetCurrentDirectoryW PostQueuedCompletionStatus FindAtomA CreateIoCompletionPort HeapSetInformation GetConsoleCursorInfo FatalAppExitA GetCPInfoExA GetVersionExA TlsAlloc GetSystemTime CopyFileExA GetStartupInfoW HeapValidate IsBadReadPtr RaiseException EnterCriticalSection LeaveCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent DeleteCriticalSection QueryPerformanceCounter GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime GetModuleHandleW Sleep ExitProcess FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType TlsGetValue TlsSetValue TlsFree GetLastError HeapDestroy HeapCreate HeapFree VirtualFree GetModuleFileNameA WriteFile HeapAlloc HeapSize HeapReAlloc GetACP GetOEMCP GetCPInfo IsValidCodePage RtlUnwind DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW MultiByteToWideChar InitializeCriticalSectionAndSpinCount WideCharToMultiByte LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers GetConsoleCP GetConsoleMode CloseHandle SetStdHandle WriteConsoleA GetConsoleOutputCP CreateFileA GetModuleHandleA

Sharing

General

Malware Config

Signatures

File Explorer

b0eda06015f710f6810a428245ff6374

kernel32

generic