d5cbc4c14dc2e8d30bc12bc2e3690dc8

General

Target
d5cbc4c14dc2e8d30bc12bc2e3690dc8
Size 635KB
Sample240319-lnjxeshc7v
SHA256 c6792e0b64d72ae1af7b519e76a2c35ed7b3f2d20e1b91b0d943c936a45dfdf6
MD5 d5cbc4c14dc2e8d30bc12bc2e3690dc8
SHA1 1dc8daeebd4c546a29b09f1df44ff4ff028a96cd
SHA512 3927323cf06718f07e02a8caae18fdaecccd46396773b4bd66ff6a72feb7e02ad315aaf1b605d3312372bf74ba9cdc1dea947fa3e01c45f0ab1b7cd1d202da2b
SSDEEP 12288:SR5vycqvh/HNpAw0We4/5P8tMIN6g8kVp+aDy3BeEbWP46b:I5KcglHN0W//g5N6ErWReEyg6b
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5cbc4c14dc2e8d30bc12bc2e3690dc8

File Explorer

d5cbc4c14dc2e8d30bc12bc2e3690dc8

.exe 635KB

d5cbc4c14dc2e8d30bc12bc2e3690dc8

IMPHASH a6bc20bccfb3ce4a748063aa050199ca
SHA256 c6792e0b64d72ae1af7b519e76a2c35ed7b3f2d20e1b91b0d943c936a45dfdf6
MD5 d5cbc4c14dc2e8d30bc12bc2e3690dc8
SHA1 1dc8daeebd4c546a29b09f1df44ff4ff028a96cd
SHA512 3927323cf06718f07e02a8caae18fdaecccd46396773b4bd66ff6a72feb7e02ad315aaf1b605d3312372bf74ba9cdc1dea947fa3e01c45f0ab1b7cd1d202da2b
SSDEEP 12288:SR5vycqvh/HNpAw0We4/5P8tMIN6g8kVp+aDy3BeEbWP46b:I5KcglHN0W//g5N6ErWReEyg6b
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5712

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegSetValueExW RegCreateKeyExW RegOpenKeyExW RegCloseKey RegSetValueExA

kernel32

GetVersion GetCurrentThread GetCurrentThreadId GetLastError GetTickCount GetCommandLineA GetModuleHandleA GetCurrentProcessId ExitProcess HeapAlloc GetProcessHeap ResetEvent VirtualAlloc Sleep VirtualFree HeapCreate WideCharToMultiByte GetEnvironmentStrings GetModuleHandleW GetACP CloseHandle ReadFile TlsFree RaiseException InterlockedCompareExchange GetCurrentDirectoryA GetCommandLineW SizeofResource GlobalUnlock GetEnvironmentStringsW LCMapStringA GetConsoleCP UnmapViewOfFile LCMapStringW InterlockedIncrement CreateFileA TlsSetValue GetFileType CreateEventA CreateFileW ExpandEnvironmentStringsA FindNextFileA CompareStringA FindFirstFileA lstrcmpA GetProcAddress DeleteFileA GetFileSize GetStartupInfoA LoadLibraryA GetVersionExA QueryPerformanceCounter GetOEMCP LoadLibraryW EnterCriticalSection HeapFree WriteConsoleW SetEndOfFile WriteConsoleA TerminateProcess SetEnvironmentVariableA CreateThread SetFilePointer MultiByteToWideChar InterlockedDecrement UnhandledExceptionFilter GetModuleFileNameA SetLastError OutputDebugStringA FormatMessageA TlsGetValue FindClose LoadResource InitializeCriticalSection LocalFree FreeLibrary GetStringTypeW HeapReAlloc GetSystemTimeAsFileTime WriteFile InterlockedExchange GetStringTypeA GetCPInfo SetStdHandle FreeEnvironmentStringsW SetErrorMode LocalAlloc GetLocaleInfoA GetConsoleMode GetCurrentProcess DeleteCriticalSection FreeEnvironmentStringsA HeapDestroy FindFirstFileW GetDriveTypeA WaitForSingleObject GetFileAttributesA FileTimeToSystemTime GetStdHandle

user32

GetClientRect InvalidateRect GetSysColor MessageBoxA GetFocus TrackPopupMenu LoadIconA ScreenToClient SetWindowTextA SetWindowLongA GetSystemMetrics BeginPaint SetFocus EndPaint FillRect GetSubMenu EnableMenuItem SetForegroundWindow LoadStringA ReleaseDC ShowWindow DestroyWindow SetWindowPos

Sharing

General

Malware Config

Signatures

File Explorer

d5cbc4c14dc2e8d30bc12bc2e3690dc8

advapi32

kernel32

user32

generic