052c8231c2df7c7840c5c8dbf700b4c6f5fa27a650cb792aebf882c69dbb8674

Sharing

Copy URL Twitter E-mail

General

Target
052c8231c2df7c7840c5c8dbf700b4c6f5fa27a650cb792aebf882c69dbb8674
Size 106KB
Sample240310-xb16qaaa47
SHA256 052c8231c2df7c7840c5c8dbf700b4c6f5fa27a650cb792aebf882c69dbb8674
MD5 0da6a89aeee28d6ff5206edc504a65a9
SHA1 654cf8cbe72bd36263a83dc039cc8328a0b04af7
SHA512 81ca342eca962b74cf3d1e6793fe870a0398d75138c031b681fa55e83dd68b3a3ce3c6eebc27beb0be247609c159a68f2de8460cc6f573106798bc13361f4751
SSDEEP 1536:l+FDoK0niY1u7Nn2JFkC2styJjCKICFjC7EWisS+5mlatSfkZ:l+FDmK71QkbstyJjCKICpC72s/mlaX
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
052c8231c2df7c7840c5c8dbf700b4c6f5fa27a650cb792aebf882c69dbb8674

File Explorer

052c8231c2df7c7840c5c8dbf700b4c6f5fa27a650cb792aebf882c69dbb8674

.exe 106KB

052c8231c2df7c7840c5c8dbf700b4c6f5fa27a650cb792aebf882c69dbb8674

IMPHASH ddbb90ebf41500dde8a2155d2d44be6d
SHA256 052c8231c2df7c7840c5c8dbf700b4c6f5fa27a650cb792aebf882c69dbb8674
MD5 0da6a89aeee28d6ff5206edc504a65a9
SHA1 654cf8cbe72bd36263a83dc039cc8328a0b04af7
SHA512 81ca342eca962b74cf3d1e6793fe870a0398d75138c031b681fa55e83dd68b3a3ce3c6eebc27beb0be247609c159a68f2de8460cc6f573106798bc13361f4751
SSDEEP 1536:l+FDoK0niY1u7Nn2JFkC2styJjCKICFjC7EWisS+5mlatSfkZ:l+FDmK71QkbstyJjCKICpC72s/mlaX
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4540

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

oleaut32

VariantChangeTypeEx SysStringLen SysAllocStringLen VariantCopyInd VariantClear

version

VerQueryValueW GetFileVersionInfoSizeW GetFileVersionInfoW

advapi32

RegQueryValueExA RegCloseKey OpenProcessToken RegOpenKeyExA LookupPrivilegeValueA

kernel32

SetCommConfig CreateFileA CloseHandle FindResourceA Sleep DeleteFileA VirtualFree SetFilePointer SetErrorMode GetSystemInfo RemoveDirectoryA ReadFile GetUserDefaultLangID OutputDebugStringA GetEnvironmentVariableA GetWindowsDirectoryA GetLocaleInfoA LoadLibraryA GetACP LockResource GetFileSize FormatMessageA FlushViewOfFile GetExitCodeProcess GetFullPathNameA GetLastError GetSystemDefaultLCID SetEndOfFile GetFileAttributesA LoadResource VirtualQuery GetCurrentProcess SizeofResource GetProcAddress GetVersionExA GetModuleHandleA GetCommandLineA GetModuleFileNameA IsDBCSLeadByte CreateProcessA VirtualProtect CreateDirectoryA VirtualAlloc InterlockedExchange WriteFile ReadFile GetCommandLineA GetModuleHandleA GetLastError GetStdHandle CreateFileA GetFileSize ExitProcess WideCharToMultiByte LocalAlloc TlsSetValue VirtualAlloc LocalFree WriteFile LeaveCriticalSection GetFileType SetEndOfFile TlsGetValue SetFilePointer CloseHandle VirtualFree MultiByteToWideChar GetSystemTime RaiseException EnterCriticalSection DeleteCriticalSection

user32

MessageBoxA SetWindowLongA CharPrevA ExitWindowsEx TranslateMessage MsgWaitForMultipleObjects LoadStringA CallWindowProcA DestroyWindow CreateWindowExA PeekMessageA DispatchMessageA

Sharing

General

Malware Config

Signatures

File Explorer

052c8231c2df7c7840c5c8dbf700b4c6f5fa27a650cb792aebf882c69dbb8674

oleaut32

version

advapi32

kernel32

user32

generic