5ae6a7fce89fa106d758a62978024b2119973c7d547f7e2464b79a1f75ac74ad

General

Target
5ae6a7fce89fa106d758a62978024b2119973c7d547f7e2464b79a1f75ac74ad
Size 256KB
Sample240307-y3v98ach97
SHA256 5ae6a7fce89fa106d758a62978024b2119973c7d547f7e2464b79a1f75ac74ad
MD5 da879402f6db7fb628802c0df277c30d
SHA1 1649bdaf4059410782dad8a17b7acfa9efeb31d6
SHA512 57e4b33dd66b210499d0f242ea136260eafae9fd652b2b204e0f03e1669793e6b76b44b5f195805a30a68ff7481ece5c483971062fb0416f1d22d0e675c4e050
SSDEEP 1536:Je58ljKHqIK8lg+b/kStvu5ldUeF/sXc:S8EKi1u5ldp
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ae6a7fce89fa106d758a62978024b2119973c7d547f7e2464b79a1f75ac74ad

File Explorer

5ae6a7fce89fa106d758a62978024b2119973c7d547f7e2464b79a1f75ac74ad

.exe 256KB

5ae6a7fce89fa106d758a62978024b2119973c7d547f7e2464b79a1f75ac74ad

IMPHASH 0aa5574d9eabf58f8a05fc3de0a260cb
SHA256 5ae6a7fce89fa106d758a62978024b2119973c7d547f7e2464b79a1f75ac74ad
MD5 da879402f6db7fb628802c0df277c30d
SHA1 1649bdaf4059410782dad8a17b7acfa9efeb31d6
SHA512 57e4b33dd66b210499d0f242ea136260eafae9fd652b2b204e0f03e1669793e6b76b44b5f195805a30a68ff7481ece5c483971062fb0416f1d22d0e675c4e050
SSDEEP 1536:Je58ljKHqIK8lg+b/kStvu5ldUeF/sXc:S8EKi1u5ldp
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

23371

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindClose FindNextFileA CopyFileA SetFileAttributesA FindFirstFileA Sleep GetVolumeInformationA GetDiskFreeSpaceExA GetPrivateProfileStringA GetFileAttributesA CreateDirectoryA GetExitCodeProcess WaitForSingleObject LeaveCriticalSection EnterCriticalSection CloseHandle CreateProcessA FreeLibrary GetProcAddress LoadLibraryA lstrcatA lstrcpyA GetSystemDirectoryA MulDiv GetCurrentThreadId ExitProcess GetCurrentProcess DeleteFileA GetTempPathA CreateThread SetErrorMode GetSystemTimeAsFileTime GetCurrentProcessId GetTickCount QueryPerformanceCounter LCMapStringW LCMapStringA GetCPInfo GetOEMCP GetStringTypeW GetStringTypeA IsBadCodePtr IsBadReadPtr GetFileType GetProcessHeap SetHandleCount GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA UnhandledExceptionFilter GetModuleFileNameA GetStdHandle WriteFile HeapSize SetUnhandledExceptionFilter IsBadWritePtr FindResourceExA LoadResource FindResourceA LockResource SizeofResource DeleteCriticalSection InitializeCriticalSection GetLastError RaiseException WideCharToMultiByte MultiByteToWideChar GetVersionExA GetThreadLocale GetLocaleInfoA GetACP InterlockedExchange CreateMutexA lstrlenA LocalAlloc HeapAlloc HeapFree VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery RtlUnwind GetModuleHandleA TerminateProcess GetStartupInfoA GetCommandLineA HeapDestroy HeapCreate VirtualFree HeapReAlloc

user32

GetMessageA IsDialogMessageA TranslateMessage DispatchMessageA PostQuitMessage DestroyWindow GetWindowRect GetClientRect MoveWindow SetDlgItemTextA GetDlgItem ExitWindowsEx PostThreadMessageA CreateDialogParamA GetDC ReleaseDC wsprintfA PostMessageA MessageBoxA SendMessageA ShowWindow

gdi32

CreateFontIndirectA GetDeviceCaps

advapi32

RegDeleteValueA RegCreateKeyA OpenProcessToken LookupPrivilegeValueA AdjustTokenPrivileges InitiateSystemShutdownA RegOpenKeyA RegQueryValueExA RegOpenKeyExA RegCreateKeyExA RegSetValueExA RegCloseKey

Sharing

General

Malware Config

Signatures

File Explorer

5ae6a7fce89fa106d758a62978024b2119973c7d547f7e2464b79a1f75ac74ad

kernel32

user32

gdi32

advapi32

generic