dce5df0fb3ee7f3d4a826975b31079117ab49234e282af404d353a71a7c2db64

General

Target
dce5df0fb3ee7f3d4a826975b31079117ab49234e282af404d353a71a7c2db64
Size 165KB
Sample240305-wztk4sed95
SHA256 dce5df0fb3ee7f3d4a826975b31079117ab49234e282af404d353a71a7c2db64
MD5 e12b41ae6f83c1ac95ae24bec4358882
SHA1 bfe458811f25f7773f590f18f8e8844f7e463b20
SHA512 5453dd0a3f627a7e14278db78192d046d3f86f2f6218bf2008bc5134fabe4d3471be8b52821f07d1756a586eec718759e26730b7971a89d6845e83d6cfc25776
SSDEEP 3072:8rMNEuYg4gAJ8F4LksaJSOiAh2Vq5sBy:8QNEvrgAJcLsaJ8EJsB
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dce5df0fb3ee7f3d4a826975b31079117ab49234e282af404d353a71a7c2db64

File Explorer

dce5df0fb3ee7f3d4a826975b31079117ab49234e282af404d353a71a7c2db64

.exe 165KB

dce5df0fb3ee7f3d4a826975b31079117ab49234e282af404d353a71a7c2db64

IMPHASH 14dfb10b551a90861e7876e6e8be9bdc
SHA256 dce5df0fb3ee7f3d4a826975b31079117ab49234e282af404d353a71a7c2db64
MD5 e12b41ae6f83c1ac95ae24bec4358882
SHA1 bfe458811f25f7773f590f18f8e8844f7e463b20
SHA512 5453dd0a3f627a7e14278db78192d046d3f86f2f6218bf2008bc5134fabe4d3471be8b52821f07d1756a586eec718759e26730b7971a89d6845e83d6cfc25776
SSDEEP 3072:8rMNEuYg4gAJ8F4LksaJSOiAh2Vq5sBy:8QNEvrgAJcLsaJ8EJsB
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

4958

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WriteConsoleOutputCharacterA HeapAlloc GlobalAddAtomA GetCurrentActCtx CreateJobObjectW GetSystemDefaultLCID FreeEnvironmentStringsA CreateNamedPipeW GetProcessHeap TzSpecificLocalTimeToSystemTime WideCharToMultiByte LoadLibraryW GetLocaleInfoW FatalAppExitW GetFileAttributesA ReplaceFileW InterlockedExchange GetStdHandle GetConsoleAliasExesLengthA SetLastError LoadLibraryA LocalAlloc GetFileType AddAtomW GetModuleFileNameA lstrcatW BuildCommDCBA VirtualProtect ReleaseMutex FileTimeToLocalFileTime DeleteTimerQueueTimer CreateFileW SetStdHandle GetCurrentDirectoryW MoveFileExA GetCommandLineW HeapSetInformation GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer DecodePointer GetProcAddress GetModuleHandleW ExitProcess WriteFile GetModuleFileNameW HeapCreate EnterCriticalSection LeaveCriticalSection FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId GetLastError InterlockedDecrement QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep HeapFree GetCPInfo GetACP GetOEMCP IsValidCodePage RtlUnwind IsProcessorFeaturePresent HeapSize HeapReAlloc GetConsoleCP GetConsoleMode FlushFileBuffers LCMapStringW MultiByteToWideChar GetStringTypeW SetFilePointer CloseHandle WriteConsoleW

user32

GetClassLongW LoadIconW UpdateWindow SetKeyboardState

gdi32

GetCharWidth32W

Sharing

General

Malware Config

Signatures

File Explorer

dce5df0fb3ee7f3d4a826975b31079117ab49234e282af404d353a71a7c2db64

kernel32

user32

gdi32

generic